WeChat ID
aaronpk_tv
-
at SkajBarMalmö, Skåne, Sweden • Wed, November 6, 2019 5:02pm -
Hey! Could you do me a favor? I've published what I *hope to be* an informative and entertaining intro to OAuth & OIDC. It would be so awesome to hear your feedback so I can get better at making these types of videos! Please share it with others, too! https://www.youtube.com/watch?v=t18YB3xDfXI
-
Darryl Young
https://twitter.com/darryl_young
•
Nov 6
Good idea. I'll give that a go. Based on the Apple docs, it requires the JWT to be created "using the Elliptic Curve Digital Signature Algorithm (ECDSA) with the P-256 curve and the SHA-256 hash algorithm", which I'm doing with the `jsonwebtoken` library.
https://developer.apple.com/documentation/signinwithapplerestapi/generate_and_validate_tokens
Make sure to include exactly the claims in their docs. I was finding some JWT libraries would add their own stuff into it or change things around slightly. Probably easiest to verify by base64 decoding the claims after you generate it. -
Darryl Young
https://twitter.com/darryl_young
•
Nov 6
As I'm also using Expo, I followed the following to start with and there was no redirect_uri used.
https://medium.com/appandflow/eli5-sign-in-with-apple-for-react-native-using-expo-sdk35-node-js-5210cdb94bd6
I tried with one and it didn't make a difference. Also, in Apple's documentation, it doesn't show redirect_uri as being required.
https://developer.apple.com/documentation/signinwithapplerestapi/generate_and_validate_tokens
Huh I missed that in their docs. My next guess is your client secret JWT isn't being generated properly. Try generating it with the Ruby code in my post, it's very picky. -
Darryl Young
https://twitter.com/darryl_young
•
Nov 6
Hi, Aaron. Thanks for the link to your great article. Unfortunately, for me, I still can't get past the "invalid_grant" issue. I'm doing this for an Expo (React Native) app so things are slightly different in that I don't need redirect_url, etc. but generally it's the same. Hmm.
Why do you say you don't need a redirect_uri? That's probably the problem if you're not including it.
-
Mike Ortiz
https://twitter.com/ortizmj12
•
Nov 1
hey @aaronpk, thanks again for the great talk at #bsidespdx! Any chance you'll be sharing the slide deck? I wanted to review them again and there were some links in there I wanted to follow up on :)
Video is up and slides are linked from there! https://www.youtube.com/watch?v=xSDeToCyJjo&list=PLRyLn6THA5wN05b3qJ6N0OpL3YbritKI- -
Slides from my "How to Hack OAuth" talk at #oredev are up!
https://speakerdeck.com/aaronpk/how-to-hack-oauth-oredev-2019
Thanks everyone for coming to watch and I hope you got something out of it! I'll post again when the video is out! -
Darryl Young
https://twitter.com/darryl_young
•
Nov 6
Ah, that’s a shame. It seemed to be going well so far and I thought I'd be done today but since getting "invalid_grant" I've made no progress (I'm using it in an Expo app). I've seen it mentioned in a few places but nobody seems to have a solution. Thanks for the quick reply. 👍
They pushed out some changes a little bit ago and I have been able to exchange the authorization code and get the user info now! I updated my post so maybe take a look through it again. https://developer.okta.com/blog/2019/06/04/what-the-heck-is-sign-in-with-apple
-
A quick and easy visualization of Back Channel data transfer vs Front Channel data transfer by @aaronpk at #oredev!
I'll now be sitting here dreaming of a world where kitties come to give me my access tokens ..
-
Super interesting talk about hacking #oauth by @aaronpk ... insightful!
-
This is absolutely how it feels trying to learn OAuth when you're first starting out.... Ok fine, this is how I still feel some days @aaronpk #oredev
-
Incredibly excited to hear @aaronpk talk about How To Hack OAuth! Such a relevant topic to my current work and a talk I've been looking forward to since it was announced! #oredev
-
at MalmöMässanMalmö, Skåne, Sweden • Wed, November 6, 2019 8:19amØredev day 1!
-
Malmö, Skåne, Sweden • Wed, November 6, 2019 8:18am
-
Malmö, Skåne, Sweden • Wed, November 6, 2019 7:43am
-
at SkajBarMalmö, Skåne, Sweden • Tue, November 5, 2019 10:00pm
