Questions tagged [appauth]

Tag for the AppAuth library. Use in conjunction with a platform specific tag like `ios`, `android` or `electron`.

AppAuth is an SDK for native applications that facilitates interaction with OAuth2 and OpenID Connect authorization servers. Platform specific libraries are available for Android, iOS and JS-based environments like Node and Electron.

AppAuth follows the current best practice for federated authentication and authorization in native apps. This includes:

  • Using in-app browser tabs for user interaction, when available, such as Chrome Custom Tabs on Android, and SFSafariViewController on iOS.
  • Support for both custom scheme and [universal link][universal-link] / [app link][app-link] redirect URIs.
  • Support for PKCE, a standardized authorization code protection scheme.

The code is open source (Apache2) and are maintained by the OpenID Foundation.

Homepage: https://appauth.io/
Android library: https://github.com/openid/AppAuth-Android
iOS library: https://github.com/openid/AppAuth-iOS
JS library: https://github.com/openid/AppAuth-JS

188 questions
3
votes
0 answers

AppAuth: Get authorisation code with iOS & Android app and access token on server

I'm implementing the OpenId AppAuth SDK for IOS and Android. https://github.com/openid/AppAuth-iOS https://github.com/openid/AppAuth-android Our app oAuth flow: In our app the user starts a oAuth login using the AppAuth SDK (IOS or Android). App…
Thimon
  • 53
  • 6
3
votes
0 answers

How to clear cookies from Custom Tabs Android

I've implemented SSO using the App Auth library. Part of the functionality of our app is when the user is logged in via App auth the cookies are shared to Custom Tabs in order for users to access logged in user content. However, when the user logs…
DJ-DOO
  • 4,545
  • 15
  • 58
  • 98
3
votes
0 answers

Expo v39 AppAuth cannot get a correct accessToken from azure

I can get an accessToken but when I parse it, it doesn't have my custom scope and correct audience. Here is a parsed token - parsed accessToken Here is a config that I used - const baseRedirectUrl = Linking.makeUrl('/redirect'); const config = { …
3
votes
0 answers

GoogleSignIn - Framework AppAuth not found, framework is red Swift

Sort of new to coding. Read through every other post and still getting the same error where running build after following the GoogleSignIn tutorial gives me an error saying 'Framework not found AppAuth'. error message framework in red List of stuff…
Matthew
  • 59
  • 8
3
votes
1 answer

IdentityServer4, Swift iOS App and External Identity Provider

IdentityServer newbie here.... I am building a mobile app and would like to provide the end user the ability to sign in using SSO for users that have a corporate identity provider and my company as the identity provider for those that don't have an…
3
votes
1 answer

iOS - AppAuth without redirection

I'm developing an iOS application for a website using openId connect for authentication. So I came across AppAuth. But I need the authentication to be made using my own interface not from the browser. Is there a way using to achieve this AppAuth? Or…
Mireille
  • 637
  • 2
  • 12
  • 27
3
votes
1 answer

'Refresh token expired exception' - AppAuth Android

I'm using appAuth with Keycloak for authentication in my android app. After about 25 minutes, the access token expires. When I try to refresh the token after this period, I get this error: Failed to authorize = AuthorizationException:…
naffie
  • 679
  • 1
  • 12
  • 29
3
votes
1 answer

PendingIntent with implicit intent returning cancelled exception when using OpenId AppAuth-Android library

I am trying to implement oauth2 to enable users to login with Reddit. I have created my app on reddit with the appropriate redirect uri. What I did: A MainActivity with a login button. Clicking the login button, starts the authorization flow. To…
kerry
  • 2,362
  • 20
  • 33
3
votes
0 answers

SSO Okta not returning back to app after login

I am trying to configure SSO Authentication for my android app. I found a tutorial on below link, https://codelabs.developers.google.com/codelabs/appauth-android-codelab/#0 It shows SSO example based on Google. I am using Okta for this purpose, I…
3
votes
0 answers

Access token refresh in iOS app extension

We have an iOS app which communicates with a web-service. It uses OAuth authentication (via AppAuth) with access_token and refresh_token. When short access_token expires, we need to refresh it using refresh_token. We are now adding a Today Extension…
uson1x
  • 407
  • 3
  • 16
3
votes
3 answers

How does SFAuthenticationSession store session related cookies in Safari

tl;dr read the last paragraph. I am using AppAuth (https://github.com/openid/AppAuth-iOS) library for handling OpenID based authentication of users for which I want to provide SSO experience through my app. The deployment target of my app is iOS 11…
Au Ris
  • 4,541
  • 2
  • 26
  • 53
3
votes
0 answers

Android AppAuth send password to Chrome Tab

I'm looking to incorporate the AppAuth library into my app. Currently there is already a method for users to log in and authenticate to servers. The apps API is being phased out and a new one is being phased in. As part of this, all new endpoints…
chuckliddell0
  • 2,061
  • 1
  • 19
  • 25
3
votes
1 answer

What is the main difference between Google SignIn and OpenId Appauth

I used to do Google SignIn by adding Google SignIn button and performing the same steps given by Google and I love this flow. But my company asked me to do google signIn by OpenId Appauth and their concern is, if we will use OpenId Appauth then it…
Dimitri Payet
  • 187
  • 2
  • 12
3
votes
1 answer

Instruct Custom Tabs to not suggest authentication storage

I have an Android application that opens up a OAUth webpage using AppAuth for authentication of the user. When the user has authenticated, the chrome browser is suggesting to the user to store the credentials (user/pass) in the browser. If possible,…
Hrafn
  • 2,867
  • 3
  • 25
  • 44
3
votes
0 answers

iOS 11 AppAuth handling redirect URI that redirects

When using AppAuth (v 0.90.0) for Google OAuth authentication on my iOS app, specifically for iOS 11, the following happens: Start Google authentication on the iOS client with a redirect URI http://myproduct.com/oauth-redirect. Because the client…
Grnbeagle
  • 1,751
  • 2
  • 16
  • 26
1 2
3
12 13