AuthActivity startWebAuth Crash

Start by inspecting com.dropbox.core.android.AuthActivity.kt, especially startWebAuth at line 295 and the onTopResumedActivityChanged path shown in the trace. Reproduce the reported authentication flow and determine the conditions leading to the non-exported activity SecurityException; done means the flow no longer crashes and the relevant Android behavior is covered by verification.

Fatal Exception: java.lang.SecurityException: Permission Denial: starting Intent { act=android.intent.action.VIEW dat=https://www.dropbox.com/... cmp=team.opay.pay.merchant.service/com.opay.webview.WebFoundationActivity } from ProcessRecord{28b315a 21629:com.smartwallet.app/u0a265} (pid=21629, uid=10265) not exported from uid 10256
at android.os.Parcel.createExceptionOrNull(Parcel.java:2373)
at android.os.Parcel.createException(Parcel.java:2357)
at android.os.Parcel.readException(Parcel.java:2340)
at android.os.Parcel.readException(Parcel.java:2282)
at android.app.IActivityTaskManager$Stub$Proxy.startActivity(IActivityTaskManager.java:4128)
at android.app.Instrumentation.execStartActivity(Instrumentation.java:1732)
at android.app.Activity.startActivityForResult(Activity.java:5370)
at android.app.Activity.startActivityForResult(Activity.java:5328)
at android.app.Activity.startActivity(Activity.java:5714)
at android.app.Activity.startActivity(Activity.java:5667)
at com.dropbox.core.android.AuthActivity.startWebAuth(AuthActivity.kt:295)
at com.dropbox.core.android.AuthActivity.onTopResumedActivityChanged$lambda-0(AuthActivity.kt:144)
at android.app.Activity.runOnUiThread(Activity.java:7138)
at com.dropbox.core.android.AuthActivity.onTopResumedActivityChanged(AuthActivity.kt:134)
at android.app.Activity.performTopResumedActivityChanged(Activity.java:2000)
at android.app.ActivityThread.reportTopResumedActivityChanged(ActivityThread.java:4911)
at android.app.ActivityThread.handleTopResumedActivityChanged(ActivityThread.java:4895)
at android.app.servertransaction.TopResumedActivityChangeItem.execute(TopResumedActivityChangeItem.java:39)
at android.app.servertransaction.TransactionExecutor.executeCallbacks(TransactionExecutor.java:135)
at android.app.servertransaction.TransactionExecutor.execute(TransactionExecutor.java:95)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2203)
at android.os.Handler.dispatchMessage(Handler.java:106)
at android.os.Looper.loop(Looper.java:268)
at android.app.ActivityThread.main(ActivityThread.java:8017)
at java.lang.reflect.Method.invoke(Method.java)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:627)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:997)

   Caused by android.os.RemoteException: Remote stack trace:
at com.android.server.wm.ActivityStackSupervisor.checkStartAnyActivityPermission(ActivityStackSupervisor.java:1095)
at com.android.server.wm.ActivityStarter.executeRequest(ActivityStarter.java:1643)
at com.android.server.wm.ActivityStarter.execute(ActivityStarter.java:1279)
at com.android.server.wm.ActivityTaskManagerService.startActivityAsUser(ActivityTaskManagerService.java:1238)
at com.android.server.wm.ActivityTaskManagerService.startActivityAsUser(ActivityTaskManagerService.java:1181)