If you're interested, here is my sample code I was able to use ... • Aaron Parecki

42°F

Aaron Parecki https://aaronparecki.com/ • Jun 3
weirdnesses:

• Their token endpoint requires setting a User-Agent header, otherwise responds with an HTML error
• Client secrets are a signed JWT using ECDSA + SHA256
• An email address isn't returned even when requesting the `email` scope

If you're interested, here is my sample code I was able to use to get an access token and ID token from Apple

https://github.com/aaronpk/sign-in-with-apple-example

Portland, Oregon, USA

Mon, Jun 3, 2019 3:20pm -07:00

31 likes 12 reposts 2 replies
Have you written a response to this? Let me know the URL:
- Kévin Chalet twitter.com/PinpointTownes
  
  Looks like non-standard private_key_jwt client authentication to me 😁
  
  Tue, Jun 4, 2019 8:20am +00:00 (via brid-gy.appspot.com)
- Dominick Baier twitter.com/leastprivilege
  
  Looks like code flow without PKCE to me ;)
  
  Tue, Jun 4, 2019 6:01am +00:00 (via brid-gy.appspot.com)

Posted in /replies using quill.p3k.io