MaikuB / MaikuB/flutter_appauth

Apple complains about using the external browser when logging in ("Guideline 4.0 - Design")

Open
#435 5 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Objective-C
Stars
308
Forks
301
Avg merge
2d 11h
Merged PRs (30d)
5

Description

Hi,
Apple denies publishing our iOS app in Apple Connect Store because app_auth uses the external browser for logging in. Is there a configuration we can use to comply to Apples requirements? (No issues with Android version in Google Play Store).

Here's the response Apple sent us during submission:

> Guideline 4.0 - Design
>
> We noticed that the user is taken to the default web browser to sign in or register for an account, which provides a poor user experience.
>
> Next Steps
>
> To resolve this issue, please revise your app to enable users to sign in or register for an account in the app.
>
> You may also choose to implement the Safari View Controller API to display web content within your app. The Safari View Controller allows the display of a URL and inspection of the certificate from an embedded browser in an app so that customers can verify the webpage URL and SSL certificate to confirm they are entering their sign in credentials into a legitimate page.
>
> Resources
>
> - For additional information on the Safari View Controller API, please review the What's New in Safari webpage.
> - Note that apps that support account creation must also offer account deletion, per App Store Review Guideline 5.1.1(v). Learn more about offering account deletion in your app.
> Please see attached screenshot for details.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file or test is identified. Start by tracing the iOS login flow in flutter_appauth and checking how the AppAuth browser is selected; determine whether Safari View Controller can be configured. Done means iOS sign-in or registration no longer opens the external browser and the app satisfies the stated App Store requirement.

Written by the indexing model from the issue text.

Assessment

Tech stack
flutter, ios
Domain
authentication, mobile
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.