AUTH-OAUTH-001
all ERROR OAuth flow detected
Description
An OAuth/OpenID flow was detected. Google rejects OAuth in embedded WebViews: it must go through an external browser (Custom Tabs / ASWebAuthenticationSession).
Recommendation
Configure `auth_providers` in the application so sign-in opens in the external browser.
- Introduced in ruleset : 2026.09.0
- Detector :
oauth_detected
Risks detected according to the technical rules currently configured. Publication remains subject to Apple's and Google's review, and their rules evolve.