Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-06-09 Thread Joost van Dijk
Great! So custom URL schemes work, and I can see the server URL with a padlock. Did you happen to test if TLS client authentication works as well? —Joost On 09 Jun 2015, at 21:24, Aaron Parecki aaron.pare...@gmail.com wrote: Here's what it looks like! It appears there are no hooks to do

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-06-08 Thread Aaron Parecki
Apple announced new changes in iOS 9 this morning. Not all changes got a mention on stage. This one caught my eye as being relevant to this thread: SFSafariViewController can be used to display web content within your app. It shares cookies and other website data with Safari, and has many of

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-06-08 Thread Leah Culver
This is the best news I've heard all year (if it does work well for OAuth). On Mon, Jun 8, 2015 at 3:16 PM, Aaron Parecki aaron.pare...@gmail.com wrote: Apple announced new changes in iOS 9 this morning. Not all changes got a mention on stage. This one caught my eye as being relevant to this

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-06-08 Thread Nat Sakimura
I wonder how callback parameters are handed back to the calling app. Nat 2015年6月9日火曜日、Leah Culverleah.cul...@gmail.comさんは書きました: This is the best news I've heard all year (if it does work well for OAuth). On Mon, Jun 8, 2015 at 3:16 PM, Aaron Parecki aaron.pare...@gmail.com

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-12 Thread nov matake
GREE, one of the biggest gaming platform which I’m working for, provides both iOS and Android SDKs. Our iOS SDK had been using Safari for OAuth dance before. However, Apple started to reject lots of gaming apps using our SDK because of external browser launch. So we had switched to embedded

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-11 Thread Aaron Parecki
I haven't quite done enough research to be sure, but it sounds like there is a way to open a WKWebView sheet in a similar way to opening the mail sheet, where your app doesn't actually have access to the window that is opened. I believe this is referred to as a UIRemoteViewController. There are

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-11 Thread Dick Hardt
Aaron: After some googling around, I see a number of SDKs use embedded web views for logging in, and have been doing that for a while. I'm not sure how a UIRemoteViewController would give the user assurance they are really on Google or LinkedIn that would be any different than launch Safari.

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-08 Thread Aaron Parecki
Oh this is not a good response at all. I would re-submit with a note so that another reviewer takes a look at it. Plenty of apps pop out to the Facebook app to do OAuth against the native app, I don't see why this would be different. Unless the Linkedin authorization page looks terrible on mobile

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-08 Thread Dick Hardt
Glad to know I was not missing something. I explained all the logic in my first response to the reviewer. Next response was to comply with 10.6 I have filed an appeal. Will keep list updated. Aaron: the LinkedIn API claw back really sucks. Facebook turned down APIs earlier than v2 last month,

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-08 Thread Nat Sakimura
Thanks Dick. OIDF is also trying to write a white paper why in-app browser for this purpose is a bad idea. =nat via iPhone 2015/05/09 4:28、Dick Hardt dick.ha...@gmail.com のメッセージ: Glad to know I was not missing something. I explained all the logic in my first response to the reviewer.