Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-06-09 Thread Joost van Dijk
Great! So custom URL schemes work, and I can see the server URL with a padlock. Did you happen to test if TLS client authentication works as well? —Joost > On 09 Jun 2015, at 21:24, Aaron Parecki wrote: > > Here's what it looks like! It appears there are no hooks to do anything > except handle

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-11 Thread Joost van Dijk
. Next >> response was to comply with 10.6 >> >> I have filed an appeal. Will keep list updated. >> >> Aaron: the LinkedIn API claw back really sucks. Facebook turned down APIs >> earlier than v2 last month, and now there is little profile data from them. >&

Re: [oauth] OAuth 2.0 flow in iOS :: Apple rejecting opening up Safari

2015-05-08 Thread Joost van Dijk
This is indeed very bad news. Not just because we are developing apps that use the same approach, but also because we have declared in-app browsers to be Bad Practice when used for authentication because of the reasons you described. Furthermore, it just won't work. Our OAuth authorization serve