@capgo/capacitor-inappbrowser 8.15.3 → 8.16.0

package/README.md

@@ -1584,7 +1584,9 @@ See the README section "openSecureWindow (OAuth)" for full setup examples.
 | **`jsInterface`**                      |                                                                                                                                                                        | JavaScript Interface: The webview automatically injects a JavaScript interface providing: - `window.mobileApp.close()`: Closes the webview from JavaScript - `window.mobileApp.postMessage(obj)`: Sends a message to the app (listen via "messageFromWebview" event) - `window.mobileApp.hide()` / `window.mobileApp.show()` when allowWebViewJsVisibilityControl is true in CapacitorConfig - `window.mobileApp.takeScreenshot()` when `allowScreenshotsFromWebPage` is true                                                                                                                                                                                                                                                                                                                                                                                                                                          |                                                               | 6.10.0 |
 | **`allowScreenshotsFromWebPage`**      | <code>boolean</code>                                                                                                                                                   | Allows page JavaScript to call `window.mobileApp.takeScreenshot()`. Disabled by default so only the host app can trigger native screenshots through the plugin API.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | <code>false</code>                                            | 8.4.0  |
 | **`captureConsoleLogs`**               | <code>boolean</code>                                                                                                                                                   | Emits `consoleMessage` events for JavaScript `console.*` output coming from the managed page. Useful when the webview stays hidden and you still need page-level diagnostics.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | <code>false</code>                                            | 8.6.0  |
-| **`persistWebViewData`**               | <code>boolean</code>                                                                                                                                                   | Controls whether the webview should persist website data such as cache, cookies, local storage, IndexedDB, and session data. When false, iOS uses a non-persistent `WKWebsiteDataStore`. Android disables per-view cache and DOM/database storage where the system WebView supports it. Android cookies use the shared WebView cookie store; clearing them also affects the host WebView, so prefer per-URL cookie helpers instead of relying on process-global wipes.                                                                                                                                                                                                                                                                                                                                                                                                                                                 | <code>true</code>                                             | 8.6.36 |
+| **`persistWebViewData`**               | <code>boolean</code>                                                                                                                                                   | Controls whether the webview should persist website data such as cache, cookies, local storage, IndexedDB, and session data. When false, iOS uses a non-persistent `WKWebsiteDataStore`. Android disables per-view cache and database storage where the system WebView supports it while keeping DOM storage available so SPAs can use `localStorage`. Android cookies use the shared WebView cookie store; clearing them also affects the host WebView, so prefer per-URL cookie helpers instead of relying on process-global wipes.                                                                                                                                                                                                                                                                                                                                                                                  | <code>true</code>                                             | 8.6.36 |
+| **`clearCookiesOnOpen`**               | <code>boolean</code>                                                                                                                                                   | Clear all cookies from the InAppBrowser data store before the first navigation of this webview. Cordova `clearcache: 'yes'` parity. On Android, uses process-global `CookieManager.removeAllCookies()` and blocks until the wipe completes. On iOS, clears cookies from the webview's `WKWebsiteDataStore` (isolated plugin store by default). On Web this is a no-op.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | <code>false</code>                                            | 8.16.0 |
+| **`clearCacheOnOpen`**                 | <code>boolean</code>                                                                                                                                                   | Clear cached website data before the first navigation of this webview. Cordova `cleardata: 'yes'` parity. On Android, calls `WebView.clearCache(true)` after the webview is created. On iOS, removes disk and memory cache from the webview's `WKWebsiteDataStore`. On Web this is a no-op.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            | <code>false</code>                                            | 8.16.0 |
 | **`useSharedDataStore`**               | <code>boolean</code>                                                                                                                                                   | Share the host Capacitor WebView's website data store (cookies, local storage, etc.). On iOS 17+, InAppBrowser uses an isolated plugin-owned `WKWebsiteDataStore` by default so host and browser data stay separate. Set this to `true` to use `WKWebsiteDataStore.default()` instead, which shares session cookies with the Capacitor host WebView. Useful for SSO / OIDC silent login when the IdP session was established in the main app WebView. Requires `persistWebViewData: true` (the default). When `persistWebViewData` is false, a non-persistent store is used and this option has no effect. On Android this is a no-op: cookies are already process-global via `CookieManager`. On Web this is a no-op. Warning: clearing cookies/cache for a webview opened with this flag can affect the host WebView on iOS, because both share the same store. `clearAllBrowsingData()` still skips the host store. | <code>false</code>                                            | 8.13.6 |
 | **`clientCertificate`**                | <code>'none' \| 'prompt'</code>                                                                                                                                        | Controls Android TLS client certificate prompts during HTTPS handshakes. Use `prompt` to show the system certificate picker; omit or use `none` to cancel silently (default).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | <code>"none"</code>                                           | 8.7.5  |
 | **`clientCertificatePrompt`**          | <code>boolean</code>                                                                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |                                                               |        |

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/CapgoInAppBrowserPlugin.java

@@ -20,7 +20,6 @@ import android.util.Log;
 import android.webkit.CookieManager;
 import android.webkit.PermissionRequest;
 import android.webkit.WebView;
-import androidx.activity.result.ActivityResult;
 import androidx.activity.result.ActivityResultLauncher;
 import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
@@ -63,8 +62,7 @@ import org.json.JSONObject;
         @Permission(alias = "camera", strings = { Manifest.permission.CAMERA }),
         @Permission(alias = "microphone", strings = { Manifest.permission.RECORD_AUDIO }),
         @Permission(alias = "storage", strings = { Manifest.permission.READ_EXTERNAL_STORAGE })
-    },
-    requestCodes = { WebViewDialog.FILE_CHOOSER_REQUEST_CODE }
+    }
 )
 public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.PermissionHandler {
 
@@ -108,7 +106,6 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
     private boolean currentPermissionNeedsCamera = false;
     private boolean currentPermissionNeedsMicrophone = false;
 
-    private ActivityResultLauncher<Intent> fileChooserLauncher;
     private ActivityResultLauncher<String[]> webPermissionLauncher;
     private PluginCall pendingCameraPermissionCall;
 
@@ -118,10 +115,6 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
     @Override
     public void load() {
         super.load();
-        fileChooserLauncher = getActivity().registerForActivityResult(
-            new ActivityResultContracts.StartActivityForResult(),
-            this::handleFileChooserResult
-        );
         webPermissionLauncher = getActivity().registerForActivityResult(
             new ActivityResultContracts.RequestMultiplePermissions(),
             this::handleWebPermissionResult
@@ -355,6 +348,7 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         );
         dialog.setInstanceId(webViewId);
         dialog.activity = CapgoInAppBrowserPlugin.this.getActivity();
+        dialog.bindToHostActivity();
         registerWebView(webViewId, dialog, makeActive);
         return dialog;
     }
@@ -525,59 +519,6 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         return targetWebViews;
     }
 
-    private WebViewDialog findFileChooserDialog() {
-        if (activeWebViewId != null) {
-            WebViewDialog dialog = webViewDialogs.get(activeWebViewId);
-            if (dialog != null && dialog.mFilePathCallback != null) {
-                return dialog;
-            }
-        }
-
-        if (webViewDialog != null && webViewDialog.mFilePathCallback != null) {
-            return webViewDialog;
-        }
-
-        for (WebViewDialog dialog : webViewDialogs.values()) {
-            if (dialog != null && dialog.mFilePathCallback != null) {
-                return dialog;
-            }
-        }
-
-        return null;
-    }
-
-    private void handleFileChooserResult(ActivityResult result) {
-        WebViewDialog webViewDialog = findFileChooserDialog();
-        if (webViewDialog != null && webViewDialog.mFilePathCallback != null) {
-            Uri[] results = null;
-            Intent data = result.getData();
-
-            if (result.getResultCode() == Activity.RESULT_OK) {
-                // Handle camera capture result
-                if (webViewDialog.tempCameraUri != null && (data == null || data.getData() == null)) {
-                    results = new Uri[] { webViewDialog.tempCameraUri };
-                }
-                // Handle regular file picker result
-                else if (data != null) {
-                    if (data.getClipData() != null) {
-                        // Handle multiple files
-                        int count = data.getClipData().getItemCount();
-                        results = new Uri[count];
-                        for (int i = 0; i < count; i++) {
-                            results[i] = data.getClipData().getItemAt(i).getUri();
-                        }
-                    } else if (data.getData() != null) {
-                        // Handle single file
-                        results = new Uri[] { data.getData() };
-                    }
-                }
-            }
-
-            // Send the result to WebView and clean up
-            webViewDialog.completeLegacyFileChooserResult(results);
-        }
-    }
-
     public void handleMicrophonePermissionRequest(PermissionRequest request) {
         if (request == null) {
             return;
@@ -796,6 +737,16 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         );
     }
 
+    private CustomTabColorSchemeParams buildCustomTabColorScheme(int colorInt) {
+        return applyCustomTabNavigationBarColor(new CustomTabColorSchemeParams.Builder().setToolbarColor(colorInt), colorInt).build();
+    }
+
+    @SuppressWarnings("deprecation")
+    private CustomTabColorSchemeParams.Builder applyCustomTabNavigationBarColor(CustomTabColorSchemeParams.Builder builder, int colorInt) {
+        // androidx.browser 1.9.0 still exposes only setNavigationBarColor; no non-deprecated replacement.
+        return builder.setNavigationBarColor(colorInt);
+    }
+
     @PluginMethod
     public void open(PluginCall call) {
         String url = call.getString("url");
@@ -828,10 +779,7 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         if (toolbarColor != null) {
             try {
                 int colorInt = Color.parseColor(toolbarColor);
-                CustomTabColorSchemeParams colorParams = new CustomTabColorSchemeParams.Builder()
-                    .setToolbarColor(colorInt)
-                    .setNavigationBarColor(colorInt)
-                    .build();
+                CustomTabColorSchemeParams colorParams = buildCustomTabColorScheme(colorInt);
                 builder.setDefaultColorSchemeParams(colorParams);
                 builder.setColorSchemeParams(CustomTabsIntent.COLOR_SCHEME_DARK, colorParams);
             } catch (IllegalArgumentException e) {
@@ -1152,6 +1100,8 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         options.setHandleDownloads(Boolean.TRUE.equals(call.getBoolean("handleDownloads", false)));
 
         options.setPersistWebViewData(call.getBoolean("persistWebViewData", true));
+        options.setClearCookiesOnOpen(Boolean.TRUE.equals(call.getBoolean("clearCookiesOnOpen", false)));
+        options.setClearCacheOnOpen(Boolean.TRUE.equals(call.getBoolean("clearCacheOnOpen", false)));
         // No-op on Android: CookieManager is already process-global (API parity with iOS).
         options.setUseSharedDataStore(Boolean.TRUE.equals(call.getBoolean("useSharedDataStore", false)));
         // Set text zoom if specified in options (default is 100)

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/InAppBrowserPlugin.java

@@ -11,7 +11,6 @@ import com.getcapacitor.annotation.Permission;
         @Permission(alias = "camera", strings = { Manifest.permission.CAMERA }),
         @Permission(alias = "microphone", strings = { Manifest.permission.RECORD_AUDIO }),
         @Permission(alias = "storage", strings = { Manifest.permission.READ_EXTERNAL_STORAGE })
-    },
-    requestCodes = { WebViewDialog.FILE_CHOOSER_REQUEST_CODE }
+    }
 )
 public class InAppBrowserPlugin extends CapgoInAppBrowserPlugin {}

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/OpenTimeBrowsingDataClearSupport.java

@@ -0,0 +1,40 @@
+package ee.forgr.capacitor_inappbrowser;
+
+import android.webkit.CookieManager;
+import android.webkit.WebView;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+
+/**
+ * Applies cordova-style open-time cookie/cache clearing before the first navigation.
+ */
+final class OpenTimeBrowsingDataClearSupport {
+
+    private static final long COOKIE_CLEAR_TIMEOUT_SECONDS = 10;
+
+    private OpenTimeBrowsingDataClearSupport() {}
+
+    static void applyBeforeFirstNavigation(
+        CookieManager cookieManager,
+        WebView webView,
+        boolean clearCookiesOnOpen,
+        boolean clearCacheOnOpen
+    ) {
+        if (clearCookiesOnOpen) {
+            final CountDownLatch latch = new CountDownLatch(1);
+            cookieManager.removeAllCookies((value) -> latch.countDown());
+            try {
+                if (!latch.await(COOKIE_CLEAR_TIMEOUT_SECONDS, TimeUnit.SECONDS)) {
+                    throw new IllegalStateException("Timed out waiting for cookie clear");
+                }
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+            }
+            cookieManager.flush();
+        }
+
+        if (clearCacheOnOpen && webView != null) {
+            webView.clearCache(true);
+        }
+    }
+}

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/Options.java

@@ -204,6 +204,8 @@ public class Options {
     private boolean captureConsoleLogs = false;
     private boolean handleDownloads = false;
     private boolean persistWebViewData = true;
+    private boolean clearCookiesOnOpen = false;
+    private boolean clearCacheOnOpen = false;
     /** Accepted for API parity with iOS; Android cookies are already process-global. */
     private boolean useSharedDataStore = false;
     private InvisibilityMode invisibilityMode = InvisibilityMode.AWARE;
@@ -320,6 +322,22 @@ public class Options {
         this.persistWebViewData = persistWebViewData;
     }
 
+    public boolean getClearCookiesOnOpen() {
+        return clearCookiesOnOpen;
+    }
+
+    public void setClearCookiesOnOpen(boolean clearCookiesOnOpen) {
+        this.clearCookiesOnOpen = clearCookiesOnOpen;
+    }
+
+    public boolean getClearCacheOnOpen() {
+        return clearCacheOnOpen;
+    }
+
+    public void setClearCacheOnOpen(boolean clearCacheOnOpen) {
+        this.clearCacheOnOpen = clearCacheOnOpen;
+    }
+
     public boolean getUseSharedDataStore() {
         return useSharedDataStore;
     }
@@ -857,6 +875,8 @@ public class Options {
         copy.setBlockedHosts(new ArrayList<>(getBlockedHosts()));
         copy.setWidth(width);
         copy.setPersistWebViewData(persistWebViewData);
+        copy.setClearCookiesOnOpen(clearCookiesOnOpen);
+        copy.setClearCacheOnOpen(clearCacheOnOpen);
         copy.setUseSharedDataStore(useSharedDataStore);
         copy.setHeight(height);
         copy.setToBack(toBack);

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/SafeAreaInsetsSupport.java

@@ -122,9 +122,14 @@ final class SafeAreaInsetsSupport {
      * Whether the WebView container must be inset for the bottom system bar. On Android 15+ the dialog
      * is forced edge-to-edge (decorFitsSystemWindows=false), so the window always draws under the
      * navigation bar and insetting is mandatory to keep bottom content on-screen, regardless of the
-     * enabledSafeBottomMargin opt-in that older versions honour.
+     * enabledSafeBottomMargin opt-in that older versions honour. Pre-API 30 windows that lay out behind
+     * a transparent navigation bar need the same treatment.
      */
+    static boolean shouldInsetBottomForContainer(boolean enabledSafeBottomMargin, boolean isEdgeToEdge, boolean layoutBehindNavigationBar) {
+        return enabledSafeBottomMargin || isEdgeToEdge || layoutBehindNavigationBar;
+    }
+
     static boolean shouldInsetBottomForContainer(boolean enabledSafeBottomMargin, boolean isEdgeToEdge) {
-        return enabledSafeBottomMargin || isEdgeToEdge;
+        return shouldInsetBottomForContainer(enabledSafeBottomMargin, isEdgeToEdge, false);
     }
 }

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/SystemUiChromeSupport.java

@@ -0,0 +1,109 @@
+package ee.forgr.capacitor_inappbrowser;
+
+import android.graphics.Color;
+import android.os.Build;
+import android.view.View;
+import android.view.Window;
+import android.view.WindowManager;
+import androidx.core.view.WindowCompat;
+import androidx.core.view.WindowInsetsControllerCompat;
+
+/**
+ * Centralizes window chrome decisions so WebViewDialog can avoid deprecated system UI APIs on
+ * Android 15+ while keeping API 24–34 behavior unchanged.
+ */
+final class SystemUiChromeSupport {
+
+    static final int EDGE_TO_EDGE_SDK = Build.VERSION_CODES.VANILLA_ICE_CREAM;
+
+    private SystemUiChromeSupport() {}
+
+    static boolean requiresEdgeToEdgeChrome(int sdkInt) {
+        return sdkInt >= EDGE_TO_EDGE_SDK;
+    }
+
+    static boolean shouldApplyLegacySystemBarColors(int sdkInt) {
+        return sdkInt < EDGE_TO_EDGE_SDK;
+    }
+
+    static boolean shouldUsePreApi30LayoutFlags(int sdkInt) {
+        return sdkInt < Build.VERSION_CODES.R;
+    }
+
+    static boolean usesLayoutBehindNavigationBar(int sdkInt, boolean edgeToEdge) {
+        return !edgeToEdge && shouldUsePreApi30LayoutFlags(sdkInt);
+    }
+
+    static void setDecorFitsSystemWindows(Window window, boolean decorFitsSystemWindows) {
+        if (window == null) {
+            return;
+        }
+        WindowCompat.setDecorFitsSystemWindows(window, decorFitsSystemWindows);
+    }
+
+    static void prepareInitialDialogWindow(Window window) {
+        if (window == null) {
+            return;
+        }
+
+        window.addFlags(WindowManager.LayoutParams.FLAG_DRAWS_SYSTEM_BAR_BACKGROUNDS);
+        if (shouldApplyLegacySystemBarColors(Build.VERSION.SDK_INT)) {
+            applyLegacySystemBarColors(window, Color.TRANSPARENT, null);
+            clearLegacyTranslucentStatusFlag(window);
+        }
+    }
+
+    static void applyDialogWindowChrome(
+        Window window,
+        View decorView,
+        boolean edgeToEdge,
+        Integer statusBarColor,
+        Integer navigationBarColor,
+        Boolean lightStatusBars
+    ) {
+        if (window == null || decorView == null) {
+            return;
+        }
+
+        if (edgeToEdge) {
+            setDecorFitsSystemWindows(window, false);
+        } else if (!shouldUsePreApi30LayoutFlags(Build.VERSION.SDK_INT)) {
+            setDecorFitsSystemWindows(window, true);
+            applyLegacySystemBarColors(window, statusBarColor, navigationBarColor);
+        } else {
+            applyPreApi30LayoutBehindNavigationBar(decorView);
+            applyLegacySystemBarColors(window, statusBarColor, navigationBarColor);
+        }
+
+        WindowInsetsControllerCompat controller = new WindowInsetsControllerCompat(window, decorView);
+        if (lightStatusBars != null) {
+            controller.setAppearanceLightStatusBars(lightStatusBars);
+        }
+    }
+
+    @SuppressWarnings("deprecation")
+    private static void applyPreApi30LayoutBehindNavigationBar(View decorView) {
+        decorView.setSystemUiVisibility(View.SYSTEM_UI_FLAG_LAYOUT_STABLE | View.SYSTEM_UI_FLAG_LAYOUT_HIDE_NAVIGATION);
+    }
+
+    @SuppressWarnings("deprecation")
+    static void applyLegacySystemBarColors(Window window, Integer statusBarColor, Integer navigationBarColor) {
+        if (window == null || !shouldApplyLegacySystemBarColors(Build.VERSION.SDK_INT)) {
+            return;
+        }
+
+        if (statusBarColor != null && Build.VERSION.SDK_INT >= Build.VERSION_CODES.LOLLIPOP) {
+            window.setStatusBarColor(statusBarColor);
+        }
+        if (navigationBarColor != null && Build.VERSION.SDK_INT >= Build.VERSION_CODES.LOLLIPOP) {
+            window.setNavigationBarColor(navigationBarColor);
+        }
+    }
+
+    @SuppressWarnings("deprecation")
+    private static void clearLegacyTranslucentStatusFlag(Window window) {
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.LOLLIPOP) {
+            window.clearFlags(WindowManager.LayoutParams.FLAG_TRANSLUCENT_STATUS);
+        }
+    }
+}