Documentation request – forming a response to token
Nobody has claimed this yet.
- Dominant language
- Objective-C
- Stars
- 2k
- Forks
- 867
- Avg merge
- 4d 48m
- Merged PRs (30d)
- 1
Description
Hello, this may be out of the scope of issues for this project, but I've been all over trying to find a specification for how to form a token response that will cause AppAuth to close the browser window and complete the request making the payload available to my app.
This is a companion issue to this Stack Overflow question
In my particular case I have gone through the process up until the point where AppAuth browser window has been redirected to my server. It has presented the server with it's authCode and it's waiting for a response. My server has obtained a valid token and is ready to respond.
In looking around I have found documentation that states that AppAuth is compliant with RFC 8252, but the section in question 7.1 does not provide a specification for response structure.
What is the structure of the response that AppAuth is awaiting in this scenario?
It may be helpful to know that my scenario requires me to use a redirectUri that points to my token server. It's possible this is out of spec, and if so, I kindly request any suggestion for strategy to handle this scenario that is in spec. As you may know, auth is a bit of a nebulous topic for those of us who aren't intrenched in it, so it can be hard to penetrate from the outside. (As an explicit example, I am getting a token from Instagram and transforming it into a Firebase Auth token.)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with RFC 8252 §7.1 and the linked Stack Overflow question, then review the AppAuth-iOS redirect and token-exchange documentation mentioned by the issue. Document the expected response structure and clarify whether using a token server as the redirectUri is supported, including an in-spec strategy if it is not.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- firebase, ios, objective-c
- Domain
- authentication, documentation, mobile
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100