@capgo/inappbrowser 8.1.18 → 8.1.20

package/README.md

@@ -94,6 +94,24 @@ InAppBrowser.openWebView({
 
 Web platform is not supported. Use `window.open` instead.
 
+### Open WebView in Full Screen Mode
+
+To open the webview in true full screen mode (content extends behind the status bar), set `enabledSafeTopMargin` to `false`:
+
+```js
+import { InAppBrowser } from '@capgo/inappbrowser'
+
+InAppBrowser.openWebView({
+  url: "YOUR_URL",
+  enabledSafeTopMargin: false  // Disables safe area at top, allows full screen
+});
+```
+
+This option works independently of the toolbar type:
+- **iOS**: The webview extends behind the status bar, providing true edge-to-edge content
+- **Android**: The top margin is disabled, allowing content to fill the entire screen
+
+Perfect for immersive experiences like video players, games, or full-screen web applications. Can be combined with any `toolbarType` setting.
 
 ### Test app and code:
 
@@ -236,6 +254,7 @@ window.mobileApp.close();
 * [`removeAllListeners()`](#removealllisteners)
 * [`reload(...)`](#reload)
 * [`updateDimensions(...)`](#updatedimensions)
+* [`openSecureWindow(...)`](#opensecurewindow)
 * [Interfaces](#interfaces)
 * [Type Aliases](#type-aliases)
 * [Enums](#enums)
@@ -665,6 +684,63 @@ When `id` is omitted, targets the active webview.
 --------------------
 
 
+### openSecureWindow(...)
+
+```typescript
+openSecureWindow(options: OpenSecureWindowOptions) => Promise<OpenSecureWindowResponse>
+```
+
+Opens a secured window for OAuth2 authentication.
+For web, you should have the code in the redirected page to use a broadcast channel to send the redirected url to the app
+Something like:
+```html
+&lt;html&gt;
+&lt;head&gt;&lt;/head&gt;
+&lt;body&gt;
+&lt;script&gt;
+  const searchParams = new URLSearchParams(location.search)
+  if (searchParams.has("code")) {
+    new BroadcastChannel("my-channel-name").postMessage(location.href);
+    window.close();
+  }
+&lt;/script&gt;
+&lt;/body&gt;
+&lt;/html&gt;
+```
+For mobile, you should have a redirect uri that opens the app, something like: `myapp://oauth_callback/`
+And make sure to register it in the app's info.plist:
+```xml
+&lt;key&gt;CFBundleURLTypes&lt;/key&gt;
+&lt;array&gt;
+   &lt;dict&gt;
+      &lt;key&gt;CFBundleURLSchemes&lt;/key&gt;
+      &lt;array&gt;
+         &lt;string&gt;myapp&lt;/string&gt;
+      &lt;/array&gt;
+   &lt;/dict&gt;
+&lt;/array&gt;
+```
+And in the AndroidManifest.xml file:
+```xml
+&lt;activity&gt;
+   &lt;intent-filter&gt;
+      &lt;action android:name="android.intent.action.VIEW" /&gt;
+      &lt;category android:name="android.intent.category.DEFAULT" /&gt;
+      &lt;category android:name="android.intent.category.BROWSABLE" /&gt;
+      &lt;data android:host="oauth_callback" android:scheme="myapp" /&gt;
+   &lt;/intent-filter&gt;
+&lt;/activity&gt;
+```
+
+| Param         | Type                                                                        | Description                                 |
+| ------------- | --------------------------------------------------------------------------- | ------------------------------------------- |
+| **`options`** | <code><a href="#opensecurewindowoptions">OpenSecureWindowOptions</a></code> | - the options for the openSecureWindow call |
+
+**Returns:** <code>Promise&lt;<a href="#opensecurewindowresponse">OpenSecureWindowResponse</a>&gt;</code>
+
+--------------------
+
+
 ### Interfaces
 
 
@@ -717,6 +793,8 @@ When `id` is omitted, targets the active webview.
 | **`url`**                              | <code>string</code>                                                                                                                                                    | Target URL to load.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |                                                               | 0.1.0  |
 | **`headers`**                          | <code><a href="#headers">Headers</a></code>                                                                                                                            | <a href="#headers">Headers</a> to send with the request.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |                                                               | 0.1.0  |
 | **`credentials`**                      | <code><a href="#credentials">Credentials</a></code>                                                                                                                    | <a href="#credentials">Credentials</a> to send with the request and all subsequent requests for the same host.                                                                                                                                                                                                                                                                                                                                                                                                                                             |                                                               | 6.1.0  |
+| **`method`**                           | <code>string</code>                                                                                                                                                    | HTTP method to use for the initial request. **Optional parameter - defaults to GET if not specified.** Existing code that doesn't provide this parameter will continue to work unchanged with standard GET requests. When specified with 'POST', 'PUT', or 'PATCH' methods that support a body, you can also provide a `body` parameter with the request payload. **Platform Notes:** - iOS: Full support for all HTTP methods with headers - Android: Custom headers may not be sent with POST/PUT/PATCH requests due to WebView limitations              | <code>"GET"</code>                                            | 8.2.0  |
+| **`body`**                             | <code>string</code>                                                                                                                                                    | HTTP body to send with the request when using POST, PUT, or other methods that support a body. Should be a string (use JSON.stringify for JSON data). **Optional parameter - only used when `method` is specified and supports a request body.** Omitting this parameter (or using GET method) results in standard behavior without a request body.                                                                                                                                                                                                        |                                                               | 8.2.0  |
 | **`materialPicker`**                   | <code>boolean</code>                                                                                                                                                   | materialPicker: if true, uses Material Design theme for date and time pickers on Android. This improves the appearance of HTML date inputs to use modern Material Design UI instead of the old style pickers.                                                                                                                                                                                                                                                                                                                                              | <code>false</code>                                            | 7.4.1  |
 | **`jsInterface`**                      |                                                                                                                                                                        | JavaScript Interface: The webview automatically injects a JavaScript interface providing: - `window.mobileApp.close()`: Closes the webview from JavaScript - `window.mobileApp.postMessage(obj)`: Sends a message to the app (listen via "messageFromWebview" event) - `window.mobileApp.hide()` / `window.mobileApp.show()` when allowWebViewJsVisibilityControl is true in CapacitorConfig                                                                                                                                                               |                                                               | 6.10.0 |
 | **`shareDisclaimer`**                  | <code><a href="#disclaimeroptions">DisclaimerOptions</a></code>                                                                                                        | Share options for the webview. When provided, shows a disclaimer dialog before sharing content. This is useful for: - Warning users about sharing sensitive information - Getting user consent before sharing - Explaining what will be shared - Complying with privacy regulations Note: shareSubject is required when using shareDisclaimer                                                                                                                                                                                                              |                                                               | 0.1.0  |
@@ -748,6 +826,7 @@ When `id` is omitted, targets the active webview.
 | **`preventDeeplink`**                  | <code>boolean</code>                                                                                                                                                   | preventDeeplink: if true, the deeplink will not be opened, if false the deeplink will be opened when clicked on the link. on IOS each schema need to be added to info.plist file under LSApplicationQueriesSchemes when false to make it work.                                                                                                                                                                                                                                                                                                             | <code>false</code>                                            | 0.1.0  |
 | **`authorizedAppLinks`**               | <code>string[]</code>                                                                                                                                                  | List of base URLs whose hosts are treated as authorized App Links (Android) and Universal Links (iOS). - On both platforms, only HTTPS links whose host matches any entry in this list will attempt to open via the corresponding native application. - If the app is not installed or the system cannot handle the link, the URL will continue loading inside the in-app browser. - Matching is host-based (case-insensitive), ignoring the "www." prefix. - When `preventDeeplink` is enabled, all external handling is blocked regardless of this list. | <code>[]</code>                                               | 7.12.0 |
 | **`enabledSafeBottomMargin`**          | <code>boolean</code>                                                                                                                                                   | If true, the webView will not take the full height and will have a 20px margin at the bottom. This creates a safe margin area outside the browser view.                                                                                                                                                                                                                                                                                                                                                                                                    | <code>false</code>                                            | 7.13.0 |
+| **`enabledSafeTopMargin`**             | <code>boolean</code>                                                                                                                                                   | If false, the webView will extend behind the status bar for true full-screen immersive content. When true (default), respects the safe area at the top of the screen. Works independently of toolbarType - use for full-screen video players, games, or immersive web apps.                                                                                                                                                                                                                                                                                | <code>true</code>                                             | 8.2.0  |
 | **`useTopInset`**                      | <code>boolean</code>                                                                                                                                                   | When true, applies the system status bar inset as the WebView top margin on Android. Keeps the legacy 0px margin by default for apps that handle padding themselves.                                                                                                                                                                                                                                                                                                                                                                                       | <code>false</code>                                            |        |
 | **`enableGooglePaySupport`**           | <code>boolean</code>                                                                                                                                                   | enableGooglePaySupport: if true, enables support for Google Pay popups and Payment Request API. This fixes OR_BIBED_15 errors by allowing popup windows and configuring Cross-Origin-Opener-Policy. Only enable this if you need Google Pay functionality as it allows popup windows. When enabled: - Allows popup windows for Google Pay authentication - Sets proper CORS headers for Payment Request API - Enables multiple window support in WebView - Configures secure context for payment processing                                                | <code>false</code>                                            | 7.13.0 |
 | **`blockedHosts`**                     | <code>string[]</code>                                                                                                                                                  | blockedHosts: List of host patterns that should be blocked from loading in the InAppBrowser's internal navigations. Any request inside WebView to a URL with a host matching any of these patterns will be blocked. Supports wildcard patterns like: - "*.example.com" to block all subdomains - "www.example.*" to block wildcard domain extensions                                                                                                                                                                                                       | <code>[]</code>                                               | 7.17.0 |
@@ -814,6 +893,22 @@ When `id` is omitted, targets the active webview.
 | **`y`**      | <code>number</code> | Y position from the top edge in pixels  |
 
 
+#### OpenSecureWindowResponse
+
+| Prop                | Type                | Description                             |
+| ------------------- | ------------------- | --------------------------------------- |
+| **`redirectedUri`** | <code>string</code> | The result of the openSecureWindow call |
+
+
+#### OpenSecureWindowOptions
+
+| Prop                       | Type                | Description                                                                                                                                                     |
+| -------------------------- | ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **`authEndpoint`**         | <code>string</code> | The endpoint to open                                                                                                                                            |
+| **`redirectUri`**          | <code>string</code> | The redirect URI to use for the openSecureWindow call. This will be checked to make sure it matches the redirect URI after the window finishes the redirection. |
+| **`broadcastChannelName`** | <code>string</code> | The name of the broadcast channel to listen to, relevant only for web                                                                                           |
+
+
 ### Type Aliases
 
 

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/InAppBrowserPlugin.java

@@ -55,7 +55,7 @@ import org.json.JSONObject;
 )
 public class InAppBrowserPlugin extends Plugin implements WebViewDialog.PermissionHandler {
 
-    private final String pluginVersion = "8.1.18";
+    private final String pluginVersion = "8.1.20";
 
     public static final String CUSTOM_TAB_PACKAGE_NAME = "com.android.chrome"; // Change when in stable
     private CustomTabsClient customTabsClient;
@@ -70,6 +70,9 @@ public class InAppBrowserPlugin extends Plugin implements WebViewDialog.Permissi
 
     private ActivityResultLauncher<Intent> fileChooserLauncher;
 
+    private PluginCall openSecureWindowSavedCall;
+    private String openSecureWindowRedirectUri;
+
     @Override
     public void load() {
         super.load();
@@ -621,6 +624,9 @@ public class InAppBrowserPlugin extends Plugin implements WebViewDialog.Permissi
         // Set enabledSafeBottomMargin option
         options.setEnabledSafeMargin(Boolean.TRUE.equals(call.getBoolean("enabledSafeBottomMargin", false)));
 
+        // Set enabledSafeTopMargin option (defaults to true for safe area)
+        options.setEnabledSafeTopMargin(call.getBoolean("enabledSafeTopMargin", true));
+
         // Use system top inset for WebView margin when explicitly enabled
         options.setUseTopInset(Boolean.TRUE.equals(call.getBoolean("useTopInset", false)));
 
@@ -767,6 +773,16 @@ public class InAppBrowserPlugin extends Plugin implements WebViewDialog.Permissi
         options.setAllowWebViewJsVisibilityControl(allowWebViewJsVisibilityControl);
         options.setInvisibilityMode(Options.InvisibilityMode.fromString(call.getString("invisibilityMode", "AWARE")));
 
+        // Set HTTP method and body if provided
+        String httpMethod = call.getString("method");
+        String httpBody = call.getString("body");
+        if (httpMethod != null) {
+            options.setHttpMethod(httpMethod);
+        }
+        if (httpBody != null) {
+            options.setHttpBody(httpBody);
+        }
+
         this.getActivity().runOnUiThread(
             new Runnable() {
                 @Override
@@ -1094,6 +1110,11 @@ public class InAppBrowserPlugin extends Plugin implements WebViewDialog.Permissi
         if (!ok) {
             Log.e(getLogTag(), "Error binding to custom tabs service");
         }
+        // If we have a saved call and user returned without callback, reject
+        if (openSecureWindowSavedCall != null) {
+            openSecureWindowSavedCall.reject("OAuth cancelled or no callback received");
+            openSecureWindowSavedCall = null;
+        }
     }
 
     protected void handleOnPause() {
@@ -1137,6 +1158,7 @@ public class InAppBrowserPlugin extends Plugin implements WebViewDialog.Permissi
         currentPermissionRequest = null;
         customTabsClient = null;
         currentSession = null;
+        openSecureWindowSavedCall = null;
         super.handleOnDestroy();
     }
 
@@ -1184,4 +1206,69 @@ public class InAppBrowserPlugin extends Plugin implements WebViewDialog.Permissi
             }
         );
     }
+
+    @PluginMethod
+    public void openSecureWindow(PluginCall call) {
+        String authEndpoint = call.getString("authEndpoint");
+
+        if (authEndpoint == null || authEndpoint.isEmpty()) {
+            call.reject("Auth endpoint is required");
+            return;
+        }
+
+        String redirectUri = call.getString("redirectUri");
+        if (redirectUri == null || redirectUri.isEmpty()) {
+            call.reject("Redirect URI is required");
+            return;
+        }
+
+        openSecureWindowSavedCall = call;
+        openSecureWindowRedirectUri = redirectUri;
+
+        CustomTabsIntent.Builder builder = new CustomTabsIntent.Builder();
+        builder.enableUrlBarHiding();
+        builder.setShareState(CustomTabsIntent.SHARE_STATE_OFF);
+        CustomTabsIntent customTabsIntent = builder.build();
+        customTabsIntent.intent.setFlags(Intent.FLAG_ACTIVITY_NO_HISTORY | Intent.FLAG_ACTIVITY_CLEAR_TOP);
+        customTabsIntent.intent.putExtra(CustomTabsIntent.EXTRA_ENABLE_INSTANT_APPS, false);
+        customTabsIntent.intent.putExtra(CustomTabsIntent.EXTRA_DISABLE_BACKGROUND_INTERACTION, false);
+        customTabsIntent.launchUrl(getActivity(), Uri.parse(authEndpoint));
+    }
+
+    @Override
+    protected void handleOnNewIntent(Intent intent) {
+        super.handleOnNewIntent(intent);
+
+        if (intent == null || !Intent.ACTION_VIEW.equals(intent.getAction())) {
+            return;
+        }
+
+        Uri uri = intent.getData();
+        if (uri == null) {
+            return;
+        }
+
+        if (openSecureWindowRedirectUri == null) {
+            return;
+        }
+
+        if (uri.getHost() == null || !uri.toString().startsWith(openSecureWindowRedirectUri)) {
+            return;
+        }
+
+        try {
+            // Resolve the original call with the callback url
+            if (openSecureWindowSavedCall != null) {
+                final JSObject ret = new JSObject();
+                ret.put("redirectedUri", uri.toString());
+                openSecureWindowSavedCall.resolve(ret);
+                openSecureWindowSavedCall = null;
+            }
+        } catch (Exception e) {
+            if (openSecureWindowSavedCall != null) {
+                openSecureWindowSavedCall.reject("Failed to process OAuth callback", e);
+                openSecureWindowSavedCall = null;
+            }
+        }
+    }
 }

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/Options.java

@@ -176,6 +176,7 @@ public class Options {
     private boolean preventDeeplink = false;
     private List<String> authorizedAppLinks = new ArrayList<>();
     private boolean enabledSafeBottomMargin = false;
+    private boolean enabledSafeTopMargin = true;
     private boolean useTopInset = false;
     private boolean enableGooglePaySupport = false;
     private List<String> blockedHosts = new ArrayList<>();
@@ -186,6 +187,8 @@ public class Options {
     private boolean hidden = false;
     private boolean allowWebViewJsVisibilityControl = false;
     private InvisibilityMode invisibilityMode = InvisibilityMode.AWARE;
+    private String httpMethod = null;
+    private String httpBody = null;
 
     public Integer getWidth() {
         return width;
@@ -243,6 +246,14 @@ public class Options {
         this.enabledSafeBottomMargin = enabledSafeBottomMargin;
     }
 
+    public boolean getEnabledSafeTopMargin() {
+        return enabledSafeTopMargin;
+    }
+
+    public void setEnabledSafeTopMargin(boolean enabledSafeTopMargin) {
+        this.enabledSafeTopMargin = enabledSafeTopMargin;
+    }
+
     public boolean getUseTopInset() {
         return useTopInset;
     }
@@ -527,4 +538,20 @@ public class Options {
     public void setInvisibilityMode(InvisibilityMode invisibilityMode) {
         this.invisibilityMode = invisibilityMode;
     }
+
+    public String getHttpMethod() {
+        return httpMethod;
+    }
+
+    public void setHttpMethod(String httpMethod) {
+        this.httpMethod = httpMethod;
+    }
+
+    public String getHttpBody() {
+        return httpBody;
+    }
+
+    public void setHttpBody(String httpBody) {
+        this.httpBody = httpBody;
+    }
 }

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/WebViewDialog.java

@@ -250,6 +250,19 @@ public class WebViewDialog extends Dialog {
         return _options != null && _options.getAllowWebViewJsVisibilityControl();
     }
 
+    /**
+     * Checks if the given HTTP method supports a request body.
+     * @param method The HTTP method to check
+     * @return true if the method supports a body (POST, PUT, PATCH), false otherwise
+     */
+    private boolean supportsRequestBody(String method) {
+        if (method == null) {
+            return false;
+        }
+        String upperMethod = method.toUpperCase();
+        return upperMethod.equals("POST") || upperMethod.equals("PUT") || upperMethod.equals("PATCH");
+    }
+
     public class PreShowScriptInterface {
 
         @JavascriptInterface
@@ -915,7 +928,30 @@ public class WebViewDialog extends Dialog {
             }
         }
 
-        _webView.loadUrl(this._options.getUrl(), requestHeaders);
+        // Load URL with optional HTTP method and body
+        String httpMethod = _options.getHttpMethod();
+        String httpBody = _options.getHttpBody();
+
+        if (supportsRequestBody(httpMethod) && httpBody != null) {
+            // For POST/PUT/PATCH requests with body
+            // Note: Android WebView has limitations with custom headers on POST
+            // Headers may not be sent with the initial request when using postUrl
+            byte[] postData = httpBody.getBytes(StandardCharsets.UTF_8);
+            _webView.postUrl(this._options.getUrl(), postData);
+
+            // Log a warning if headers were provided, as they won't be sent with postUrl
+            if (!requestHeaders.isEmpty()) {
+                Log.w(
+                    "InAppBrowser",
+                    "Custom headers were provided but may not be sent with POST request. " +
+                        "Android WebView's postUrl method has limited header support."
+                );
+            }
+        } else {
+            // For GET and other methods, use loadUrl with headers
+            _webView.loadUrl(this._options.getUrl(), requestHeaders);
+        }
+
         _webView.requestFocus();
         _webView.requestFocusFromTouch();
 
@@ -1181,8 +1217,10 @@ public class WebViewDialog extends Dialog {
             );
             int navBottom = _options.getEnabledSafeMargin() ? safeBottomInset : 0;
 
-            // Apply top inset only if useTopInset option is enabled or fallback to 0px
-            int navTop = _options.getUseTopInset() ? bars.top : 0;
+            // Apply top inset based on enabledSafeTopMargin and useTopInset options
+            // If enabledSafeTopMargin is false, force full screen (no top margin)
+            // Otherwise, use useTopInset to determine if system inset should be applied
+            int navTop = _options.getEnabledSafeTopMargin() && _options.getUseTopInset() ? bars.top : 0;
 
             // Avoid double-applying top inset; AppBar/status bar handled above on Android 15+
             mlp.topMargin = isAndroid15Plus ? 0 : navTop;

package/dist/docs.json

@@ -514,6 +514,30 @@
           "DimensionOptions"
         ],
         "slug": "updatedimensions"
+      },
+      {
+        "name": "openSecureWindow",
+        "signature": "(options: OpenSecureWindowOptions) => Promise<OpenSecureWindowResponse>",
+        "parameters": [
+          {
+            "name": "options",
+            "docs": "- the options for the openSecureWindow call",
+            "type": "OpenSecureWindowOptions"
+          }
+        ],
+        "returns": "Promise<OpenSecureWindowResponse>",
+        "tags": [
+          {
+            "name": "param",
+            "text": "options - the options for the openSecureWindow call"
+          }
+        ],
+        "docs": "Opens a secured window for OAuth2 authentication.\nFor web, you should have the code in the redirected page to use a broadcast channel to send the redirected url to the app\nSomething like:\n```html\n<html>\n<head></head>\n<body>\n<script>\n  const searchParams = new URLSearchParams(location.search)\n  if (searchParams.has(\"code\")) {\n    new BroadcastChannel(\"my-channel-name\").postMessage(location.href);\n    window.close();\n  }\n</script>\n</body>\n</html>\n```\nFor mobile, you should have a redirect uri that opens the app, something like: `myapp://oauth_callback/`\nAnd make sure to register it in the app's info.plist:\n```xml\n<key>CFBundleURLTypes</key>\n<array>\n   <dict>\n      <key>CFBundleURLSchemes</key>\n      <array>\n         <string>myapp</string>\n      </array>\n   </dict>\n</array>\n```\nAnd in the AndroidManifest.xml file:\n```xml\n<activity>\n   <intent-filter>\n      <action android:name=\"android.intent.action.VIEW\" />\n      <category android:name=\"android.intent.category.DEFAULT\" />\n      <category android:name=\"android.intent.category.BROWSABLE\" />\n      <data android:host=\"oauth_callback\" android:scheme=\"myapp\" />\n   </intent-filter>\n</activity>\n```",
+        "complexTypes": [
+          "OpenSecureWindowResponse",
+          "OpenSecureWindowOptions"
+        ],
+        "slug": "opensecurewindow"
       }
     ],
     "properties": []
@@ -727,6 +751,42 @@
           ],
           "type": "Credentials"
         },
+        {
+          "name": "method",
+          "tags": [
+            {
+              "text": "8.2.0",
+              "name": "since"
+            },
+            {
+              "text": "\"GET\"",
+              "name": "default"
+            },
+            {
+              "text": "method: \"POST\",\nbody: JSON.stringify({ token: \"auth-token\", data: \"value\" }),\nheaders: { \"Content-Type\": \"application/json\" }",
+              "name": "example"
+            }
+          ],
+          "docs": "HTTP method to use for the initial request.\n\n**Optional parameter - defaults to GET if not specified.**\nExisting code that doesn't provide this parameter will continue to work unchanged with standard GET requests.\n\nWhen specified with 'POST', 'PUT', or 'PATCH' methods that support a body,\nyou can also provide a `body` parameter with the request payload.\n\n**Platform Notes:**\n- iOS: Full support for all HTTP methods with headers\n- Android: Custom headers may not be sent with POST/PUT/PATCH requests due to WebView limitations",
+          "complexTypes": [],
+          "type": "string | undefined"
+        },
+        {
+          "name": "body",
+          "tags": [
+            {
+              "text": "8.2.0",
+              "name": "since"
+            },
+            {
+              "text": "method: \"POST\",\nbody: JSON.stringify({ username: \"user\", password: \"pass\" }),\nheaders: { \"Content-Type\": \"application/json\" }",
+              "name": "example"
+            }
+          ],
+          "docs": "HTTP body to send with the request when using POST, PUT, or other methods that support a body.\nShould be a string (use JSON.stringify for JSON data).\n\n**Optional parameter - only used when `method` is specified and supports a request body.**\nOmitting this parameter (or using GET method) results in standard behavior without a request body.",
+          "complexTypes": [],
+          "type": "string | undefined"
+        },
         {
           "name": "materialPicker",
           "tags": [
@@ -1273,6 +1333,26 @@
           "complexTypes": [],
           "type": "boolean | undefined"
         },
+        {
+          "name": "enabledSafeTopMargin",
+          "tags": [
+            {
+              "text": "8.2.0",
+              "name": "since"
+            },
+            {
+              "text": "true",
+              "name": "default"
+            },
+            {
+              "text": "enabledSafeTopMargin: false  // Full screen, extends behind status bar",
+              "name": "example"
+            }
+          ],
+          "docs": "If false, the webView will extend behind the status bar for true full-screen immersive content.\nWhen true (default), respects the safe area at the top of the screen.\nWorks independently of toolbarType - use for full-screen video players, games, or immersive web apps.",
+          "complexTypes": [],
+          "type": "boolean | undefined"
+        },
         {
           "name": "useTopInset",
           "tags": [
@@ -1649,6 +1729,52 @@
           "type": "number | undefined"
         }
       ]
+    },
+    {
+      "name": "OpenSecureWindowResponse",
+      "slug": "opensecurewindowresponse",
+      "docs": "",
+      "tags": [],
+      "methods": [],
+      "properties": [
+        {
+          "name": "redirectedUri",
+          "tags": [],
+          "docs": "The result of the openSecureWindow call",
+          "complexTypes": [],
+          "type": "string"
+        }
+      ]
+    },
+    {
+      "name": "OpenSecureWindowOptions",
+      "slug": "opensecurewindowoptions",
+      "docs": "",
+      "tags": [],
+      "methods": [],
+      "properties": [
+        {
+          "name": "authEndpoint",
+          "tags": [],
+          "docs": "The endpoint to open",
+          "complexTypes": [],
+          "type": "string"
+        },
+        {
+          "name": "redirectUri",
+          "tags": [],
+          "docs": "The redirect URI to use for the openSecureWindow call.\nThis will be checked to make sure it matches the redirect URI after the window finishes the redirection.",
+          "complexTypes": [],
+          "type": "string"
+        },
+        {
+          "name": "broadcastChannelName",
+          "tags": [],
+          "docs": "The name of the broadcast channel to listen to, relevant only for web",
+          "complexTypes": [],
+          "type": "string | undefined"
+        }
+      ]
     }
   ],
   "enums": [