iOS - AppAuth without redirection

Question

I'm developing an iOS application for a website using openId connect for authentication. So I came across AppAuth. But I need the authentication to be made using my own interface not from the browser. Is there a way using to achieve this AppAuth? Or is there another library that can help me achieve this goal?

I came across some answers in SO like: Does OpenID Connect support the Resource Owner Password Credentials grant? and Oauth2 flow without redirect_uri. But I need to know if I can achieve this using AppAuth.

Thank you.

Gary Archer · Accepted Answer · 2020-09-10 18:14:08Z

4

One of the goals of OAuth is to avoid the app seeing the password. AppAuth is focused on externalising authentication from the app in this manner.

ROPC will give you the behaviour you want, but it is deprecated. Eg OAuth 2.1 Implementations will no longer support it.

AppAuth is tricky to implement - I have a blog post and code sample you can quickly run if interested - to understand goals. Once done though, you gave good security and usability.

Could you say why you want the above behaviour? Sometimes stakeholders ask for things without understanding all the issues. It is worth informing them of pros and cons of such choices.

answered Sep 10, 2020 at 18:14

Gary Archer

30.2k2 gold badges18 silver badges37 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

vibroto · Accepted Answer · 2023-11-28 12:25:25Z

-1

Original text from https://github.com/openid/AppAuth-iOS at the end of the Readme.

"You don't need to stop with the included external user agents either! Since the OIDExternalUserAgent protocol is part of AppAuth's public API, you can implement your own versions of it. In the above example, userAgent = [OIDExternalUserAgentIOSCustomBrowser CustomBrowserChrome] would be replaced with an instantiation of your user-agent implementation."

answered Nov 28, 2023 at 12:25

vibroto

3165 silver badges7 bronze badges

Collectives™ on Stack Overflow

iOS - AppAuth without redirection

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related