openid / openid/AppAuth-iOS

Documentation request – forming a response to token

Open
#451 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Objective-C
Stars
2k
Forks
867
Avg merge
4d 48m
Merged PRs (30d)
1

Description

Hello, this may be out of the scope of issues for this project, but I've been all over trying to find a specification for how to form a token response that will cause AppAuth to close the browser window and complete the request making the payload available to my app.

This is a companion issue to this Stack Overflow question

In my particular case I have gone through the process up until the point where AppAuth browser window has been redirected to my server. It has presented the server with it's authCode and it's waiting for a response. My server has obtained a valid token and is ready to respond.

In looking around I have found documentation that states that AppAuth is compliant with RFC 8252, but the section in question 7.1 does not provide a specification for response structure.

What is the structure of the response that AppAuth is awaiting in this scenario?

It may be helpful to know that my scenario requires me to use a redirectUri that points to my token server. It's possible this is out of spec, and if so, I kindly request any suggestion for strategy to handle this scenario that is in spec. As you may know, auth is a bit of a nebulous topic for those of us who aren't intrenched in it, so it can be hard to penetrate from the outside. (As an explicit example, I am getting a token from Instagram and transforming it into a Firebase Auth token.)

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with RFC 8252 §7.1 and the linked Stack Overflow question, then review the AppAuth-iOS redirect and token-exchange documentation mentioned by the issue. Document the expected response structure and clarify whether using a token server as the redirectUri is supported, including an in-spec strategy if it is not.

Written by the indexing model from the issue text.

Assessment

Tech stack
firebase, ios, objective-c
Domain
authentication, documentation, mobile
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.