Comments (5)
Hey @Ariandr The field is optional atm, so the library no longer throws any errors.
For verification: Can you rely on verifyIdToken?
from apple-signin-auth.
Hi @a-tokyo
Yes, we rely on this right now.
But the better way would be to verify the user by authorizationCode
because it's valid for 10 minutes if I'm not mistaken. And Apple says in their documentation it's specifically made for this purpose.
https://developer.apple.com/documentation/signinwithapplerestapi/verifying_a_user
It's more complex, but it's more secure. The flow described here: https://dev.to/michalrogowski/why-sign-in-with-apple-may-take-you-more-than-5-minutes-and-how-it-works-55p6
from apple-signin-auth.
I see what you mean, but I can't extract anything I can help with atm.
How can I help? 💪
from apple-signin-auth.
Hi @a-tokyo
Let's put this on hold for now. When I have free time, I will create a new issue with the description of implementing this better way.
Thanks for your desire to help 🙂
from apple-signin-auth.
@Ariandr Awesome (: Let me know whenever I can help 💪
from apple-signin-auth.
Related Issues (20)
- verifyIdToken invalid id token public key id ignoreExpiration HOT 5
- Support Cloudflare Worker HOT 2
- Is this OAuth2 client? HOT 1
- revokeAuthorizationToken returns nothing HOT 10
- Support revoking Access Tokens HOT 1
- FetchError: invalid json response body at https://appleid.apple.com/auth/revoke HOT 1
- o.URL is not a constructor HOT 5
- How to get the user details HOT 1
- jsonwebtoken dependency version has security vulnerabilities HOT 7
- Request HOT 1
- Redirect URI HOT 1
- Sign in with apple for Electron HOT 1
- getAuthorizationToken => { error: invalid_client } HOT 5
- Release notes formatting HOT 1
- Error getAuthorizationToken => invalid_client HOT 1
- Proxy issue HOT 6
- Structure changes HOT 5
- Next.js error: Global CSS cannot be imported from within node_modules. HOT 2
- Support for validating Sign in with Apple server-to-server notifications HOT 1
- accessToken is not valid. HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from apple-signin-auth.