Wednesday, October 30, 2024

Smart App Banner bug: myPittCounty iOS app banner: myPittCounty App Banner is Blank

 iOS 18.0.1

Domain: https://pay.pittcountync.gov/

Environment: Mobile Safari 

10/30/2024

Description:

Here's an unusual one that I do not believe that I have ever encountered before. A new app was launched by Pitt County in the State of North Carolina. 

This app is available from the Apple App Store. I wrote a bug about this app yesterday.

When the user visits https://pay.pittcountync.gov/ using Mobile Safari on an iPhone, they are presented with a "Smart App Banner" which is supposed to display an image of the app and an option to either:

  • Download the app if it isn't on the device
  • Open the app if the app is downloaded on the device
There's a problem, however. 

Take a look at this screenshot:


The Smart App Banner displayed by pay.pittcountync.gov is completely blank. This shouldn't be happening. 


Steps to Reproduce:

1. On an iPhone running iOS 18.0.1 navigate to pay.pittcounty.gov
2. Note the blank banner at the top of the screen 
3. Navigate to the app store and download and user the myPittCounty app for iOS
4. Navigate again to pay.pittcounty.gov
5. Note the blank banner at the top of the screen

Result: The Smart App Banner displayed at the top of pay.pittcounty.gov is blank 

Expected: The Smart App Banner displayed at the top of pay.pittcounty.gov should never be blank 



Monday, October 28, 2024

myPittCounty for iOS: Google OAuth Consent Screen: Incorrect App Name of project-191509807296

 iOS 18.0.1

myPittCounty app for iOS

10/28/2024

Description:

Here's a common problem with Google Oauth consent screens. On the Google Oauth screen presented by the myPittCounty app, the correct app name is not listed. Take a look at how it appears:




This goes against Google's own rules


Steps to Reproduce:

1. Download the myPittCounty app for iOS

2. Navigate to the log in page

3. Select the Google logo

4. From the "myPittCounty" Wants to Use "google.com" to Sign in" prompt, select "Continue"

5. From the consent screen, note the app's name isn't listed (instead it says "project-191509807296")

Result: When accessed via the myPittCounty iOS app, the Google Oauth consent screen does not display the name of the app. The app is represented as: "project-191509807296"

Expected: When accessed via the myPittCounty iOS the Google Oauth consent screen should display the correct name of the app 


Download the myPittCounty app from the app store and launch it...


Select the Google option here...


Select "Continue"...


No name of the app: just a project name. 



Curiously the Google Oauth consent screen is taken to in the app is not the same Oauth consent screen that the user is taken to when accessed via the web. The web login can be accessed here






Sunday, October 13, 2024

Pluckers app for iOS: Privacy Policy link in App Store listing lead to a 404 Page

 iOS 18.1

Pluckers Club app for iOS (version 2.1.62)

Date: 10/09/2024

Description:

An app called Pluckers Club for iOS has a bad Privacy Policy link in the Apple App Store listing for the app.


The Privacy Policy link leads to a page that looks like this:


This is the URL in question: https://www.pluckersclub.com/MemberNew/TermsAndConditions/Terms.aspx

Steps to Reproduce:

1. Head to the Apple App Store listing for the Pluckers app for iOS

2. Click on the "Privacy Policy" link 

Result: The "Privacy Policy" link on the Pluckers app for iOS detail page in the Apple App Store does not work - it leads the user to a URL that displays a "Server Error in '/' Application" error message 

Expected: The "Privacy Policy" link for the Pluckers app for iOS displayed on the detail page in the Apple App Store should always work and take the user to a valid privacy policy 


Pluckers app in the Apple App Store




Below you'll see the error message displayed by: https://www.pluckersclub.com/MemberNew/TermsAndConditions/Terms.aspx