title: Android Handling Oauth2 authentication - Can't enable cookies on WebView
body: <p>I'm trying to gain experience using retrofit/rxjava and I've decided to create an app that sort of mimics the Vimeo app. I am stuck on implementing the vimeo api's ouath authentication (also I'm aware that Vimeo has an Android SDK. I didn't want to use that since I wanted experience handling a REST service myself).</p>
  
  <p>Basically I am trying to do this through a WebView. I believe that my logic is correct and I know that there is nothing wrong with my authorization url because it works in my laptop's web browser. However, in the app I am getting an error where after the user enters their login info on Vimeo's website, a page gets brought up that says "unauthorized - this action could not be completed because your form session expired. Please make sure that cookies are enabled."</p>
  
  <p>And here is the segment of code that I've written to handle the webview logic:</p>
  
  <pre><code>@SuppressLint("SetJavaScriptEnabled")
      public void onSignInMessageButtonClick() {
          showSignInWebView(true);
          mWebView.getSettings().setJavaScriptEnabled(true);
          mWebView.getSettings().setJavaScriptCanOpenWindowsAutomatically(true);
          mWebView.getSettings().setSupportMultipleWindows(true);
          mWebView.getSettings().setUserAgentString("vimeo_test_app");
  
          if (android.os.Build.VERSION.SDK_INT &gt;= 21) {
              CookieManager.getInstance().setAcceptThirdPartyCookies(mWebView, true);
              CookieManager.getInstance().setAcceptCookie(true);
          } else {
              CookieManager.getInstance().setAcceptCookie(true);
          }
  
          mWebView.loadUrl("https://api.vimeo.com/oauth/authorize?client_id=" + VimeoClientCredentials.API_OAUTH_CLIENTID +
                  "&amp;response_type=code&amp;redirect_uri=" + VimeoClientCredentials.API_OAUTH_REDIRECT +
                  "&amp;state=" + UUID.randomUUID().toString());
  
          mWebView.setWebViewClient(new WebViewClient() {
              public boolean shouldOverrideUrlLoading (WebView webView, String url) {
                  Log.i(TAG, "shouldOverrideUrlLoading called: " + url);
                  Uri uri = Uri.parse(url);
                  if (uri.toString().startsWith(VimeoClientCredentials.API_OAUTH_REDIRECT)) {
                      webView.stopLoading();
                      webView.loadUrl("about:blank");
                      String code = Uri.parse(url).getQueryParameter("code");
                      if (code != null) {
                          mUserPresenter.getOauthToken(code, VimeoClientCredentials.API_OAUTH_REDIRECT);
                      }
                      else {
                          showUnauthorizedError();
                      }
                      return true;
                  }
                  return false;
              }
          });
      }
  </code></pre>
  
  <p>Has anyone else experienced this issue?</p>
  
  <p><strong>UPDATE:</strong>
  It appears this is an issue with cookies being set in WebView. I turned off cookies on my laptop's web browser and attempted the oauth process, and got the same error. From reading solutions on StackOverflow it appears I'm enabling cookies on the WebView correctly, so not sure what is going wrong.</p>