Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SignIn after manual revocation does not use scopes #41

Open
landabaso opened this issue Sep 15, 2022 · 1 comment
Open

SignIn after manual revocation does not use scopes #41

landabaso opened this issue Sep 15, 2022 · 1 comment

Comments

@landabaso
Copy link

landabaso commented Sep 15, 2022

I am having an issue (testing with iOS 16 on a Simulator, I don't know about other versions).

  • I do a SignIn with email & name scopes [0, 1] and ask to use anonymous email.
  • I validate the SignIn in the server side with https://appleid.apple.com/auth/token
  • Then I sign out from my App and do a manual revocation: Settings->Apple Id Profile->Password & Security->Apps Using Apple ID->Stop using Apple ID
  • Then I try to SignIn again using the same procedure (scopes [0, 1]) but this second time the dialog only asks about starting a new session and does not show options about Name or Email.
  • In the success callback I don't get email, name or anything else.

I'm doing manual token revocation as a first step before implementing programatic revocations (https://appleid.apple.com/auth/revoke). I'm not sure yet whether programatic revocations may fix the issue. I don't think it will but I will give it a try.

After a few hours something is reset and then it works again. So this may be some problem with Apple?

I've read about similar problems here: capacitor-community/apple-sign-in#44 and here invertase/react-native-apple-authentication#282 (comment)

@landabaso
Copy link
Author

After further experimentation, it appears that this strange behavior only occurs in the Simulator.
Tests on a real device work as expected. However, this can still be a problem in case Apple reviewers try to delete and create new accounts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant