79102559

Date: 2024-10-18 14:46:32
Score: 3
Natty:
Report link

We have similar issue, we have implemented app logic via google federated login, the app shows available google accounts on the device, user selects one and proceeds to access the restricted area of the app, no password required,

However for this, google tester needs to access his own google account, since this account could be from anyone, its not clear how to bypass it on the server for the second step screen for a static OTP for mobile number verification.

I dont understand how to allow google testers to bypass federated login via google and skip any additional checks on the server

Reasons:
  • Long answer (-0.5):
  • No code block (0.5):
  • Me too answer (2.5): have similar issue
  • Low reputation (0.5):
Posted by: Hashir Labs