News for hackers. Stuff that matters.
Re:How Popular Is “Sign in with Apple”? by ir77 on Tuesday January 28, 2020 @01:07PM (#22172176)
unfortunately there are very few apps so far that allow signing in with apple even though i see them offer email, google and facebook options. i think out of all of the apps that i use only adobe lightroom allowed me to sign up with apple.
Re:How Popular Is “Sign in with Apple”? by ascagnel_ on Tuesday January 28, 2020 @01:14PM (#22172285)
My understanding is that "Sign in With Apple" is still officially in beta; once it launches in full, all iOS apps that offer third-party sign ins (like the Google & Facebook options) will be mandated to also offer Apple's OAuth sign-in -- and must give it more prominent placement than third-party services.
Re:How Popular Is “Sign in with Apple”? by snowron6 on Tuesday January 28, 2020 @01:41PM (#22172629)
>will be mandated to also offer Apple's OAuth sign-in -- and must give it more prominent placement than third-party services.

That seems like an abuse of monopoly power.

Re:How Popular Is “Sign in with Apple”? by mcphage on Tuesday January 28, 2020 @02:06PM (#22172914)
How so?
Re:How Popular Is “Sign in with Apple”? by frenchyatwork on Tuesday January 28, 2020 @01:57PM (#22172822)
Welcome to iOS development.
Re:How Popular Is “Sign in with Apple”? by mikece on Tuesday January 28, 2020 @01:27PM (#22172452)
Is Sign in with Apple compliant with OAuth2 / OpenID Conenct? If it's not I don't see how Apple can justify mandating the inclusion of something that isn't standards-based?
Re:How Popular Is “Sign in with Apple”? by TJSomething on Tuesday January 28, 2020 @01:53PM (#22172766)
It's mostly compliant as of a few months ago [0]. That document is actually out of date, because Apple added a discovery endpoint since then [1]. They also haven't implemented the userinfo endpoint, but the only claims they expose are openid, name, and email, so it's not that big of a deal to just ask for those in the id_token. And the client_secret_post thing isn't much of a problem either, since their custom JWT is a perfectly valid client secret that's compliant with the underlying OAuth 2.0 standard and it's explained in their discovery document.

[0] https://bitbucket.org/openid/connect/src/default/How-Sign-in...

[1] https://appleid.apple.com/.well-known/openid-configuration

Re:How Popular Is “Sign in with Apple”? by ascagnel_ on Tuesday January 28, 2020 @01:35PM (#22172556)
They don't call it OAuth/OpenID, but they're using the same terminology and API:

https://developer.okta.com/blog/2019/06/04/what-the-heck-is-...

Re:How Popular Is “Sign in with Apple”? by setr on Tuesday January 28, 2020 @01:38PM (#22172594)
If they provide a sufficiently good sdk, I'm not clear on what the issue is justification-wise, beyond the justification necessary for any mandatory inclusions they already have.

Why does a standard matter for justifying mandatory inclusion of ... anything? Most of their mandates probably lack any kind of standardization.

Re:How Popular Is “Sign in with Apple”? by K0nserv on Tuesday January 28, 2020 @01:14PM (#22172280)
As I understand it Apple will make it mandatory for any app that offers social logins of any kind at some point.[0]

Shameless plug, I work for Skyscanner and we've had it since iOS 13 launch.

0: https://www.macrumors.com/guide/sign-in-with-apple/

Re:How Popular Is “Sign in with Apple”? by m3kw9 on Tuesday January 28, 2020 @01:09PM (#22172208)
Because those app devs also wants to know more about you
Re:How Popular Is “Sign in with Apple”? by dave5104 on Tuesday January 28, 2020 @01:15PM (#22172298)
It will be mandatory to be on the app store at some point, so that won't be a valid excuse for app developers.
Re:How Popular Is “Sign in with Apple”? by anentropic on Tuesday January 28, 2020 @01:16PM (#22172307)
after March these apps will have to offer Apple sign-in or get booted from the app store...