Re: [PATCH login-manager v2 3/3] fix #4281: ui: use a namespaced OpenID callback scheme

["Shan Shaji" <s.shaji@proxmox.com>]

On Mon Aug 10, 2026 at 4:47 PM CEST, Azharul Haque wrote:
> pveauth:// worked in testing, but on Android a custom URL scheme
> isn't exclusively owned the way a verified App Link is: any other
> app installed on the device could in principle also declare an
> intent-filter for the same short, guessable scheme.
>
> Use com.proxmox.app.openid instead, derived from the app's own
> package/bundle identifier (com.proxmox.*, reserved for Proxmox on
> both app stores), so collisions with another app's scheme are
> effectively ruled out rather than merely unlikely.
>
> Signed-off-by: Azharul Haque <haque@azharul.com>
> ---
>  lib/proxmox_login_form.dart | 6 +++++-
>  1 file changed, 5 insertions(+), 1 deletion(-)
>
> diff --git a/lib/proxmox_login_form.dart b/lib/proxmox_login_form.dart
> index 002838c..c5ea090 100644
> --- a/lib/proxmox_login_form.dart
> +++ b/lib/proxmox_login_form.dart
> @@ -17,7 +17,11 @@ import 'package:proxmox_login_manager/proxmox_password_store.dart';
>  /// OpenID Connect login completes. Must be registered as a valid redirect
>  /// URI with the realm's provider, as well as in the platform manifests
>  /// (AndroidManifest.xml / Info.plist).
> -const String openIdCallbackScheme = 'pveauth';
> +///
> +/// Derived from the app's own package/bundle identifier (`com.proxmox.*`,
> +/// reserved for Proxmox on both app stores) rather than an arbitrary word,
> +/// so it can't collide with another app's custom URL scheme.
> +const String openIdCallbackScheme = 'com.proxmox.app.openid';

Also, IMHO the scheme could just be (com.proxmox.app). I don't think
it has to be specific for openid. Sorry, missed to mention this in the
earlier replies. 
  
>  class ProxmoxProgressModel {
>    int inProgress = 0;