Which is more secure: External browser or ChromeTab for authorization?

Question

I am developing cordova based hybrid mobile apps targeted for android and iOS smartphones.

Update: Embedded webview approach is no longer supported by Google

Usecase: The application authenticate user and then would be accessing Google Calendar API's, and finally display user events on the app.

Note: I will be Using 3-legged OAuth and Google Data APIs without the client libraries.

Question For invoking OAuth requests to Google, shall I used external browser or ChromeTabs?

Which approach is best suitable from security point of view? Thanks!

Answer 1

From security point of view, it's the same, Chrome Custom Tabs rely on Chrome browser information and there is no difference on the security.

This is what official doc about Chrome Custom Tabs

Security: the browser uses Google's Safe Browsing to protect the user and the device from dangerous sites.

From app integration point of view, it's better to use Chrome Custom Tabs because you don't push the user out of the app for the login. But be aware that Chrome Custom Tabs are only available on Jellybean and greater (API 16) and needs Chrome 45 installed on the device.