Yammer URL scheme android - yammer

We are using a a secured browser and we can allow apps to be opened form links in the browser by white listing their URL scheme in a policy.
I can open the Yammer app in iOS by using the yammer:// url scheme. That does not work for Android. Does anybody know the Yammer URL scheme for android.
I found this in the manifest but I am not sure how to convert it to the scheme I need to open the Yammer app from a browser on Android.
<intent-filter>
<action
android:name="android.intent.action.VIEW"/>
<category
Android:name="android.intent.category.DEFAULT"/>
<category
Android:name="android.intent.category.BROWSABLE"/>
<data
android:scheme="yammer"
Android:hosts="threads"/>

Possibly you can try as below:
Intent url_intent = new Intent(Intent.ACTION_VIEW,
Uri.parse("yammer://threads"));
url_intent.addCategory(Intent.CATEGORY_BROWSABLE);
startActivity(url_intent);
This worked for opening the Yammer app

Related

Your app is vulnerable to Intent Redirection

I published an app to the Google Play store. I just received an email from Google that says that "Your app(s) are vulnerable to Intent Redirection.
To address this issue, follow the steps in this Google Help Center article. "
I have looked into the google help center article but couldn't find anything that I can incorporate in my app.
Although, I am using Google Play Services SMS Retriever Auth which may be the cause of this problem. I am protecting the broadcast receiver with the SEND_PERMISSION which ensures that an Intent comes from Play Services by doing so:
<receiver
android:name=".receiver.SmsBroadcastReceiver"
android:permission="com.google.android.gms.auth.api.phone.permission.SEND"
android:exported="true">
<intent-filter>
<action android:name="com.google.android.gms.auth.api.phone.SMS_RETRIEVE" />
</intent-filter>
</receiver>
How can I solve this problem? Is anyone facing the same issue? If so please can you guide me as I have to resolve this issue before 20th December or my app will get removed?
You just need to replace (android:exported="true") to (android:exported="false")..
and search everywhere if you are passing any Parcelable Object and try to remove them and check again..
Finally,,,
I recommend to use this to retrieve ur SMS >> SMS_RETRIEVER_API

Gmail contaxtual gadget is now showing in gmail message

I had developed gmail contaxtual gadget spec file and uploaded it on my HTTP server.
And configured "google apps marketplace sdk" on google developer console.
But my gadget is stll not showing in gmail inbox massage.
I might be some mistakes in gadget spec file.
I tried a lot but not getting any solution.
The googel developer doc is still showing old process of manifest file
which is not working right now.
Below is my gadget spec code.
<?xml version="1.0" encoding="UTF-8"?>
<Module>
<ModulePrefs
author="Pragmatic techsoft"
author_email="pragtech.co.in"
height="200"
author_location="India">
<Require feature="dynamic-height"/>
<Require feature="google.contentmatch">
<Param name="extractors">
google.com:EmailBodyExtractor
google.com:SenderEmailExtractor
</Param>
</Require>
</ModulePrefs>
<Content type="html" view="card">
<![CDATA[
hello
]]>
</Content>
</Module>
So, can any one guide me for how to configure all fields in marketplace sdk and also writting gadget spec file.
Any suggestions are most welcome.
Thanks in advance.
To help you on the Marketplace SDK configuration part, you may want to check Configure the Google Apps Marketplace SDK. With this, use the Enabled APIs link in the API section of the [Google API Console] to see a list of all your enabled APIs. In the list, locate the Google Apps Marketplace SDK, then click on its configuration icon. You'll need to configure each of the following settings:
Application Info: enter the following details for your app:
a short description for the app
icons for each size
select "Allow individual install" if you wish to allow installation by individual end users
Support URLs: enter a URL for your app's terms of service, and optionally for the other URL types listed
Scopes: enter the OAuth2 scopes for the services your app will access
Extensions: these settings enable app extensions
Click Save changes when you are done.
Then, for the gadget spec file, you may want to also check writing the gadget spec. Please also note of the following when writing your gadget spec:
Gmail contextual gadgets are written using the gadgets.* API.
be sure you are using the security best practices described in Using the right frameworks for security.
And, it will really help if you read through Gmail Contextual Gadgets and noting on the right framework for security and limitations in using extractors to avoid encountering other issues.
Pay attention to below hints:
Add an app to chrome web store and link it to your Google project, which you describe contextual gadget, with project ID. After publish this app, add it to test Google Domain. Since your gadget is in development stage so, don’t publish your app to Public. There are different "Visibility options" that you can choose.
To disable cache use nogadgetcache=1 (e.g. https://mail.google.com/?nogadgetcache=1)
Login with admin account which you want to test it, otherwise take more time to update manifest.
After Modify “Google Apps Marketplace SDK” click on “Test Installation Flow” to be sure there is no new permission.
I did these part and works for me:
Define google.com:MessageIDExtractor as first extension, however you don’t need that.
I recommend that select every scopes which you want to use in other
extensions here! I don’t know why put it seems the google just ask
these permission for my gadget
Define Param extractor in gadget.xml separately not with comma:
<Require feature="google.contentmatch">
<Param name="extractors">
google.com:MessageIDExtractor
</Param>
<Param name="extractors">
google.com:SenderEmailExtractor
</Param>
</Require>

Javascript Origins for Embedded Feeds in Mobile Webview

I have developed an app which loads a html document from the mobile app storage that contain Yammer Embedded Feed javascript.
Recently, our company's Yammer admin received a message from yammer, telling that all Yammer Embedded Feed javascript will not work unless the domains have been specified in the "Javascript Origins" section.
However, since we are loading the html page directly from mobile, it is just like opening a html page in web browser with "file://" as domain. Can I add "file://" in the "Javascript Origins"? I have tried to "alert" the "window.location" and it returns "about:blank" on the mobile browser.
Thanks!
I answered this question over on the O365 Network, but let me add the answer here too in case someone has a similar question in the future.
The recent push to update your Yammer app's JavaScript Origins (documented/instructions here http://naomimoneypenny.com/2015/02/11/yammer-apps-javascript-origins-update/) affects only those using the JS SDK (specifically https://c64.assets-yammer.com/assets/platform_js_sdk.js).
It does not affect those using the Embed feed (specifically https://c64.assets-yammer.com/assets/platform_embed.js)

Creating embedded app in Yammer

Is it possible to create an App that has an embedded page (iframe/etc) inside Yammer ?
Looks like the apps are only able to manipulate Yammer from outside (Open Graph) but can't actually be pages inside Yammer
(Similar to apps in facebook)
Thanks
Yammer doesn't have third-party app running inside users' home page/feed. However Apps can be listed under Yammer Directory and users can go from their menu inside Yammer to browse the apps and use them. Existing apps can be found at: https://www.yammer.com/apps?from=nav

Is Window Phone have a function as Android Call back function? Or get the event from Browser Activity event?

In Android, I can define schema in XML, so that while browser or SMS have this callback url, will automatically open the application.
<data android:scheme="http"
android:host="test.demo.com" />
I am wonder is Window Phone have same CallBack function work like Androids'?
I am thinking to develop a App with some part using webapp, but some parts using pure app.
While user logged in the application, there is a webapp page containing a website, if user click on a specific link in that webpage, such as http://test.demo.com, i hope the Window Phone application can get the callback url, so that i can start the pure app view on Window Phone App. (That pure app view is including in the same application, not opening the other application)
If you have opened the webpage on the WebBrowser Control inside your app and the user clicks any link on that webpage then that link will open inside that control itself and wont launch any other app. This is what I have understood from your question.

Resources