SQRL pop-up when accessing Google Drive files when offline
- Thread starter Stress
- Start date
What kind of files are you trying to open?
SQRL should only be activated for binary and pure text files. This is used to import identity files. Also, if another app is registered for the same mime type, you should get to choose which app you want to use to open the file.
The problem is that Android has no concept of file extensions, and the sqrl file format is not of any known mime type (other than binary or text). So it's kind of "all or nothing" for file handling for the SQRL app.
SQRL should only be activated for binary and pure text files. This is used to import identity files. Also, if another app is registered for the same mime type, you should get to choose which app you want to use to open the file.
The problem is that Android has no concept of file extensions, and the sqrl file format is not of any known mime type (other than binary or text). So it's kind of "all or nothing" for file handling for the SQRL app.
Unfortunately, it seems like Android does not allow for the creation or registration of custom mime types, at least not outside of your own app's process space. Additionally, filtering for file extensions no longer works and it seems that that's not going to change anytime soon, because Android simply does not honor the concept of file extensions at all.
I think I am seeing a related issue. Since installing the SQRL app, I am unable to open ODT files attached to an email in the GMail app. ODT files are text files created usually by the Open Office / Libre Office, etc word processors. Open Document Text files. In the GMail app I can see the thumbnail of the file with the start of the content, but when iI tap it, instead of downloading and showing the document like it used to do, I get a SQRL screen that says "This file does not appear to be a valid SQRL identity file." I do not get a pop up asking what app I want to open the file in, it immediately goes to the SQRL app.
Hi @cdsmith
In most devices settings you can reset application preferences, can be a bit hidden but should give you back the option to choose application.
If not we might need to make a list of broken devices and exclude the feature for those.
We might even consider removing the feature. We now have the option to open files and this feature is just one to be feature complete and not a feature widely used I believe.
Best regards
Daniel
In most devices settings you can reset application preferences, can be a bit hidden but should give you back the option to choose application.
If not we might need to make a list of broken devices and exclude the feature for those.
We might even consider removing the feature. We now have the option to open files and this feature is just one to be feature complete and not a feature widely used I believe.
Best regards
Daniel
When someone opens a file so your android application sees it, is there a way there to look at the file name and can you then manually filter on the file name and then say to the event handler false "I could not handle this file ask someone else" or true "yeah I handled this file", is that something that the API allows?
Also is this what you guys use: https://developer.android.com/guide/topics/manifest/data-element.html ? It does allow pattern matching on path/filename *.sqrl would be what you could use then, if that works at least, I don't know since I am not an android developer. Also this might be relevant: https://stackoverflow.com/questions/1733195/android-intent-filter-for-a-particular-file-extension
Also is this what you guys use: https://developer.android.com/guide/topics/manifest/data-element.html ? It does allow pattern matching on path/filename *.sqrl would be what you could use then, if that works at least, I don't know since I am not an android developer. Also this might be relevant: https://stackoverflow.com/questions/1733195/android-intent-filter-for-a-particular-file-extension
Last edited:
That's what I was trying to ask above: https://sqrl.grc.com/threads/sqrl-pop-up-when-accessing-google-drive-files-when-offline.717/#post-5661
Yes, this is what we're using
Yes, that's how it looks on the surface. But unfortunately, for
android:scheme="content" , the pattern matching does not work. And as I tried to explain earlier, this is not regarded as a bug by Google, since Android officially does not support or understand the concept of file extensions.Sometime in the past, you could use other mechanisms than
android:scheme="content" , where pattern matching was possible. Now it isn't anymore.Acutally, if you read the replies and follow-ups to the accepted answer on this SO post, you'll find people reporting exactly what I've explained above.
I could not agree more. I'll open an issue for this.
//EDIT:
For anyone who is interested: https://github.com/kalaspuffar/secure-quick-reliable-login/issues/351
Last edited:
So you can't use scheme:file anymore? That is stupid of them to remove.
Maybe you can add a switch in the app to turn on file handling for 1 hour, have it register to receive the files that long and then remove itself, is that possible? Though really I think most importing into clients running on things with a camera would be via the QR code anyway.
Maybe you can add a switch in the app to turn on file handling for 1 hour, have it register to receive the files that long and then remove itself, is that possible? Though really I think most importing into clients running on things with a camera would be via the QR code anyway.
While you can still additionally specify the "file" scheme (and we do), Android will nowadays always use the "content" scheme when invoking a file. If I remember correctly, this was changed some time back for security reasons. Please don't quote me here, it's already a while back when I worked on this stuff and don't remember the exact details.
I don't think that we should even spend any more effort on this, since we already have a working file import feature which can be invoked from within the app. This works as one would expect and should be all that is needed (besides the already present identity qr code scanning and text input import options). Who really needs a 4th option, right?
I don't think that we should even spend any more effort on this, since we already have a working file import feature which can be invoked from within the app. This works as one would expect and should be all that is needed (besides the already present identity qr code scanning and text input import options). Who really needs a 4th option, right?
Oh, you have importing of files from inside the app, yeah, then why have this other thing if it causes issues?
Hi @Vela Nanashi
The import is newer feature that was a part of the new API release.
We have implemented and pushed a new solution without the share with app feature.
It will be in the next release.
Best regards
Daniel
The import is newer feature that was a part of the new API release.
We have implemented and pushed a new solution without the share with app feature.
It will be in the next release.
Best regards
Daniel
So I did a bit of googling and for my phone, which is old and stuck on Android 6, to stop an app from opening a file, you go to settings, apps, and find the app and select it. The app info screen comes up and and one of the items is "Open by default." You pick this and it will show "Supported links." But when I do this for SQRL, it says "Don't open supported links." And below that there's another item that says "Other Defaults" but it says "No defaults set." So it would appear that according to this my phone shouldn't be attempting to open ODT files with SQRL. But it still does.