Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple Successfully Implements OpenID Connect with Sign in with Apple

openid.net

Post reply on HN
Print view View original

21–30 of 121 posts

Re: Apple Successfully Implements OpenID Connect with Sign in with Apple

#21

Post by helpPeople »

jsgo wrote: post #5

has sign in with Apple launched yet? It was the Big Thing in iOS 13 that I was personally most excited about but honestly, if it has launched, I haven't seen it yet. edit: from the comments it sounds like it has launched, but currently being implemented in a voluntary manner. Looked at the 9to5Mac article on iOS 13 support of apps and it looks like I just don't use any of them unfortunately. Love the idea still and h…

Doesn't this lock you further under Apple?

Harder to change everything later.

Re: Apple Successfully Implements OpenID Connect with Sign in with Apple

#22

Post by dfabulich »

Looks like Apple fixed all of the critical issues here https://bitbucket.org/openid/connect/src/default/How-Sign-in... but left in some "peculiarities," some of which are quite unpleasant.

> The scope value of only the very first request by an application is respected. If an application initially requests only the name scope, and the user allows it, it is then impossible to later also request the email scope.

So if you don't ask for the user's email right up front, you can never ask for it again later?!

Re: Apple Successfully Implements OpenID Connect with Sign in with Apple

#23

Post by [deleted] »

jsgo wrote: post #5

has sign in with Apple launched yet? It was the Big Thing in iOS 13 that I was personally most excited about but honestly, if it has launched, I haven't seen it yet. edit: from the comments it sounds like it has launched, but currently being implemented in a voluntary manner. Looked at the 9to5Mac article on iOS 13 support of apps and it looks like I just don't use any of them unfortunately. Love the idea still and h…

[deleted]

Re: Apple Successfully Implements OpenID Connect with Sign in with Apple

#24

Post by badwolf »

jsgo wrote: post #5

has sign in with Apple launched yet? It was the Big Thing in iOS 13 that I was personally most excited about but honestly, if it has launched, I haven't seen it yet. edit: from the comments it sounds like it has launched, but currently being implemented in a voluntary manner. Looked at the 9to5Mac article on iOS 13 support of apps and it looks like I just don't use any of them unfortunately. Love the idea still and h…

Seems so. TikTok uses it.

Re: Apple Successfully Implements OpenID Connect with Sign in with Apple

#25

Post by toomuchtodo »

helpPeople wrote: post #21
jsgo wrote: post #5

has sign in with Apple launched yet? It was the Big Thing in iOS 13 that I was personally most excited about but honestly, if it has launched, I haven't seen it yet. edit: from the comments it sounds like it has launched, but currently being implemented in a voluntary manner. Looked at the 9to5Mac article on iOS 13 support of apps and it looks like I just don't use any of them unfortunately. Love the idea still and h…

Doesn't this lock you further under Apple? Harder to change everything later.

Some of us never plan on leaving the Apple ecosystem. Tradeoffs.

Re: Apple Successfully Implements OpenID Connect with Sign in with Apple

#26

Post by lilyball »

helpPeople wrote: post #21
jsgo wrote: post #5

has sign in with Apple launched yet? It was the Big Thing in iOS 13 that I was personally most excited about but honestly, if it has launched, I haven't seen it yet. edit: from the comments it sounds like it has launched, but currently being implemented in a voluntary manner. Looked at the 9to5Mac article on iOS 13 support of apps and it looks like I just don't use any of them unfortunately. Love the idea still and h…

Doesn't this lock you further under Apple? Harder to change everything later.

It's no harder to change than using any other identity provider. If you want to change, the service just needs to provide some way for you to link your existing account to a new sign-in mechanism.

Classically, this is done merely by detecting that you've signed in on two different mechanisms using the same email address. That can still be done with Sign In With Apple for users that have opted to give the service their email address, but for users that opted to use Apple's email redirector, the service will simply need a way for the user to explicitly link it to another account (or to manually provide their email address).

Re: Apple Successfully Implements OpenID Connect with Sign in with Apple

#28

Post by jbigelow76 »

dfabulich wrote: post #22

Looks like Apple fixed all of the critical issues here https://bitbucket.org/openid/connect/src/default/How-Sign-in... but left in some "peculiarities," some of which are quite unpleasant. > The scope value of only the very first request by an application is respected. If an application initially requests only the name scope, and the user allows it, it is then impossible to later also request the email scope. So if y…

Yep, no "teaser" offers.

Re: Apple Successfully Implements OpenID Connect with Sign in with Apple

#29

Post by sdegutis »

djsumdog wrote: post #8

So I don't currently use Apple products, does this mean that people can use their own OpenID Connect identity providers with Apple (like if I run an Open ID Connect server at idp.example.com, I can add it as an authentication source) or is this just for using Apple's Identity Provider to allow your own apps to log-in via your Apple account? Open ID Connect is essentially a an OAuth2 implementation. The original Open…

Decentralization always fails, centralization is inherent to society and human nature. That's why we generally centralize around areas that turn into huge metropolitan cities, and why 99% of git usage is on Github, Gitlab or Bitbucket. We're a centralization-loving race. So OAuth 1.0's dream of decentralization resulted in only a few OAuth providers ever lasting long.
Post reply on HN