Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-11 Thread Dick Hardt
Aaron: After some googling around, I see a number of SDKs use embedded web views for logging in, and have been doing that for a while. I'm not sure how a UIRemoteViewController would give the user assurance they are really on Google or LinkedIn that would be any different than launch Safari. Given

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-11 Thread Aaron Parecki
I haven't quite done enough research to be sure, but it sounds like there is a way to open a WKWebView sheet in a similar way to opening the mail sheet, where your app doesn't actually have access to the window that is opened. I believe this is referred to as a UIRemoteViewController. There are som

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-11 Thread Joost van Dijk
I am stunned. What Apple is saying here is that we shouldn’t bother using OAuth2. We might as well revert to asking for the user’s Google/LinkedIn credentials directly. When we make the login page sufficiently familiar, the user won’t be able to tell the difference anyway. —Joost > On 11 May

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-11 Thread Dick Hardt
Here is what I received from the Appeal Review Board: (highlighting is mine) Hello Dick, > > We are writing to let you know the results of your appeal for your app, > Bubbler Mobile. > > The App Review Board evaluated your app and determined that the original > rejection feedback for the current