Bugzilla

I'll get a bug on file to support ASWebAuthenticationSession and link it here. It's not something we're working on at this time.

Just to reiterate the issue, the ChatGPT app is using ASWebAuthenticationSession to authenticate users with its web service. This opens a browser session with the default browser unless ASWebAuthenticationSession is not supported in the default browser. In that case, macOS falls back to Safari per the docs and matching the behavior seen here. Once Firefox supports ASWebAuthenticationSession, the authentication should open in Firefox without any changes in ChatGPT.

>  This bug is preventing IT from greenlighting the use of the application for employee use.

Until Firefox supports ASWebAuthenticationSession, it looks like our options are

1) Relax the restriction and allow Safari to be used to login in this case. If the ChatGPT app uses the `prefersEphemeralWebBrowserSession` option, then Safari shouldn't be saving any logins or session cookies when it is used to login to ChatGPT. That is the [documented behavior of Safari](https://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession/prefersephemeralwebbrowsersession?language=objc) when a ephemeral session is used. Safari might prompt to save the password, but that's true for Firefox too.
2) Use the web version of ChatGPT only.
3) Request the ChatGPT app be changed to use a regular web page authentication method which would allow it work with Firefox or any browser but requires development work on their end.

Just to reiterate the issue, the ChatGPT app is using ASWebAuthenticationSession to authenticate users with its web service. This opens a browser session with the default browser unless ASWebAuthenticationSession is not supported in the default browser. In that case, macOS falls back to Safari per the docs and matching the behavior seen here. Once Firefox supports ASWebAuthenticationSession, the authentication should open in Firefox without any changes in ChatGPT.

>  This bug is preventing IT from greenlighting the use of the application for employee use.

Until Firefox supports ASWebAuthenticationSession, it looks like our options are

1) Relax the restriction and allow Safari to be used to login in this case. If the ChatGPT app uses the `prefersEphemeralWebBrowserSession` option, then Safari shouldn't be saving any logins or session cookies when it is used to login to ChatGPT. That is the [documented behavior of Safari](https://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession/prefersephemeralwebbrowsersession?language=objc) when a ephemeral session is used. Safari might prompt to save the password, but that's true for Firefox too.
2) Use the web version of ChatGPT only.
3) Request the ChatGPT app be changed to use a regular web page authentication method which would allow it work with Firefox or any browser but requires development work on their end.

Just to reiterate the issue, the ChatGPT app is using ASWebAuthenticationSession to authenticate users with its web service. This opens a browser session with the default browser unless ASWebAuthenticationSession is not supported in the default browser. In that case, macOS falls back to Safari per the docs and matching the behavior seen here. Once Firefox supports ASWebAuthenticationSession, the authentication should open in Firefox without any changes in ChatGPT.

>  This bug is preventing IT from greenlighting the use of the application for employee use.

Until Firefox supports ASWebAuthenticationSession, it looks like our options are

1) Relax the restriction and allow Safari to be used to login in this case. If the ChatGPT app uses the `prefersEphemeralWebBrowserSession` option, then Safari shouldn't be saving any logins or session cookies when it is used to login to ChatGPT. That is the [documented behavior of Safari](https://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession/prefersephemeralwebbrowsersession?language=objc) when a ephemeral session is used. Safari might prompt to save the password, but that's true for Firefox too.
2) Use the web version of ChatGPT only.
3) Request the ChatGPT app be changed to use a regular web page authentication method which would allow it work with Firefox or any browser but requires development work on their end.

A user benefit for supporting ASWebAuthenticationSession is that non-`prefersEphemeralWebBrowserSession` sessions could re-use login credentials already saved in Firefox making the login smoother for Firefox users.