Aaron already has an example of Sign-in With Apple up and running, because of course he has 👍
WeChat ID
aaronpk_tv
-
Brandon Carroll
https://twitter.com/bcarroll22
•
Jun 4
If you have a native and a web app, and a user creates their account with Apple sign in through your app, I wonder how you sign in with that account in your web app? Is Apple sign in basically just oauth with a fake email address you don’t know? And what’s your password?
It's just OAuth. Sign In with Apple isn't limited to mobile apps. Here's a demo of doing it in a web app. https://github.com/aaronpk/sign-in-with-apple-example -
Seth A. Roby
https://twitter.com/TALlama
•
Jun 4
I haven’t looked into the tech specs yet; but I’m assuming it’s just WebauthN or OAuth under the hood. If so it shouldn’t be hard to support. -
1/ On the occasion of the launch of @apple's "Sign in with Apple," allow me to indulge in a walk down a memory lane called @MozillaPersona -- the project I loved and led at Mozilla 6-8 years ago, the project that broke my heart. This is my take, I'm sure it's incomplete.
-
Dana Fried
https://twitter.com/leftoblique
•
Jun 4
Isn't there a single open standard being used under the hood by most of the big sign in providers now? I was under the impression that they're all OAuth or something?
I've been testing out the new API and it's definitely OAuth/OpenID Connect. But it's true that this will add more work for developers, both just getting this set up and also dealing with a new kind of account identifier. -
Ben Sandofsky
https://twitter.com/sandofsky
•
Jun 3
Wow. Apple sign-in support is mandatory? https://developer.apple.com/news/?id=06032019j
Sounds like they are requiring Apple Sign-In to be an option if any other third party sign-in is also provided. Good move IMO, better for users! This will stop apps from having just a "Sign in with Facebook" option. -
Not that I've been able to find! Also can't find their userinfo or introspection endpoints. I also had to guess their authorization endpoint because it's not in their docs.
-
So far there's no docs on what you can do with the access token. I suspect using it may require also including the client_secret which is a signed JWT, or who knows. Here's the working code: https://github.com/aaronpk/sign-in-with-apple-example
-
So far there is no indication that'll be possible.
-
@fluffy
https://queer.party/@fluffy
•
Jun 3
@aaronpk Cool that they're using an open protocol! I still wish it were one with a better federation story though. Anyone should be able to provide any identity to anyone, rather than being beholden to the handful that any given website decides to support.
I totally agree! https://indieauth.net/ -
Aaron Parecki
https://aaronparecki.com/
•
Jun 3
weirdnesses:
• Their token endpoint requires setting a User-Agent header, otherwise responds with an HTML error
• Client secrets are a signed JWT using ECDSA + SHA256
• An email address isn't returned even when requesting the `email` scope
If you're interested, here is my sample code I was able to use to get an access token and ID token from Apple
https://github.com/aaronpk/sign-in-with-apple-example
