Page History

...

On the other hand, Explicit intent sent access tokens by using specific components to personalize for specific applications. Specifically when sending access tokens to hosts we should use explicit intent rather than implicit.

Noncompliant Code Example

This noncompliant code example shows an application that ...

protected void OnTokenAcquired(Bundle savedInstanceState) {
	//[Code to construct an OAuth client request goes here]
	Intent intent = new Intent(Intent.ACTION_VIEW, Uri.parse(request.getlocationUri() + "&response_type=code"));
	startActivity(intent);
}

Compliant Solution

In this compliant solution ...:

protected void OnTokenAcquired(Bundle savedInstanceState) {
	//[Code to construct an OAuth client request goes here]
	Intent intent = new Intent(Intent.ACTION_VIEW, Uri.parse(request.getlocationUri() + "&response_type=code"), this, [YOUR OAUTH ACTIVITY CLASS]);
	startActivity(intent);
}

Exceptions

Risk Assessment

Summary of risk assessment.

Automated Detection

Related Guidelines

Fill in the table below with at least one entry row, per these instructions, then remove this purple-font section.

Bibliography

...