Auth0.swift | Auth0 SDK for Apple platforms | Authentication library
kandi X-RAY | Auth0.swift Summary
kandi X-RAY | Auth0.swift Summary
Auth0 helps you to:.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of Auth0.swift
Auth0.swift Key Features
Auth0.swift Examples and Code Snippets
Community Discussions
Trending Discussions on Auth0.swift
QUESTION
I recently began a new project that uses Auth0 in which I am adding an iOS app to an existing web app project. The web app uses a machine to machine Auth0 app and we have added a Auth0 native app to handle the iOS authentication.
Everything is working as expected if I use the .webauth() call. The webauth returns a valid token and through breakpoints I have followed the code to see that it goes through the PKCE process.
The issue I am wondering about is if it is possible to use the Swift SDK and .authentication().login to get a valid token so I can create a custom login page. The designers requirements are such that custom is what we need.
Currently if I just use the .authentication().login call it returns an invalid token. I can see that this flow does not follow PKCE protocol and returns a token whose header says it is signed with RS256 when in reality it is signed with HS256.
I see where I can implement a PKCE authentication through RESTful calls(and using a webview...) but I would think it would be possible with the swift SDK provided. Any hints or help would be greatly appreciated.
Using Auth0.Swift 1.2.2, Xcode 10 beta, ios 11, swift 4.
The webauth call:
...ANSWER
Answered 2018-Sep-11 at 14:36It has been pointed out to me that creating a custom Auth0 login basically goes against the security that Auth0 is trying to provide. It takes the handling of usernames and passwords out of Auth0's hands and puts them back into being handled by the creator of the app.
So, custom logins are not supposed to be part of the design. And despite it's lack of customizability I will be implementing the .lock login flow to keep from having to use a web login in my app.
Just want to put this here in case someone else ends up in my situation.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install Auth0.swift
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page