Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How Popular Is “Sign in with Apple”?

daringfireball.net

Post reply on HN
Print view View original

61–70 of 340 posts

Re: How Popular Is “Sign in with Apple”?

#61

Post by reaperducer »

habosa wrote: post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

wanted the app to have the same options across platforms

I guess this is the part I don't understand. How did you plan to test across platforms if you don't have an iOS device with which to test?

Re: How Popular Is “Sign in with Apple”?

#62

Post by setr »

mikece wrote: post #45
ascagnel_ wrote: post #12

Earlier quoted context omitted.

My understanding is that "Sign in With Apple" is still officially in beta; once it launches in full, all iOS apps that offer third-party sign ins (like the Google & Facebook options) will be mandated to also offer Apple's OAuth sign-in -- and must give it more prominent placement than third-party services.

Is Sign in with Apple compliant with OAuth2 / OpenID Conenct? If it's not I don't see how Apple can justify mandating the inclusion of something that isn't standards-based?

If they provide a sufficiently good sdk, I'm not clear on what the issue is justification-wise, beyond the justification necessary for any mandatory inclusions they already have.

Why does a standard matter for justifying mandatory inclusion of ... anything? Most of their mandates probably lack any kind of standardization.

Re: How Popular Is “Sign in with Apple”?

#63

Post by [deleted] »

habosa wrote: post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

[deleted]

Re: How Popular Is “Sign in with Apple”?

#64

Post by sehugg »

habosa wrote: post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

Doing it through Firebase might be easier: https://firebase.google.com/docs/auth/ios/apple

Re: How Popular Is “Sign in with Apple”?

#65

Post by snowron6 »

ascagnel_ wrote: post #12
ir77 wrote: post #5

unfortunately there are very few apps so far that allow signing in with apple even though i see them offer email, google and facebook options. i think out of all of the apps that i use only adobe lightroom allowed me to sign up with apple.

My understanding is that "Sign in With Apple" is still officially in beta; once it launches in full, all iOS apps that offer third-party sign ins (like the Google & Facebook options) will be mandated to also offer Apple's OAuth sign-in -- and must give it more prominent placement than third-party services.

>will be mandated to also offer Apple's OAuth sign-in -- and must give it more prominent placement than third-party services.

That seems like an abuse of monopoly power.

Re: How Popular Is “Sign in with Apple”?

#66

Post by pgkyc »

I've spent the last +18 months building a product that does this with even more privacy than Apple. It's called idvpn.ca and we assign a virtual ID (pseudonym) to you for each app/vendor you connect to.

This way if they're breached, you don't care and they don't care, yet we can meet any compliance requirements the app/vendor has such as age checking, sanction list checking, anti-money laundering, counter terrorist financing etc.

We're eagerly looking for vendors interested in beta testing our service, as we have a working product (using OIDC, and/or we easily integrate with Wordpress) and are looking for the MVP/business model now.

Re: How Popular Is “Sign in with Apple”?

#67

Post by codemac »

reaperducer wrote: post #61
habosa wrote: post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

wanted the app to have the same options across platforms I guess this is the part I don't understand. How did you plan to test across platforms if you don't have an iOS device with which to test?

They might mean their website rather than iOS.

Re: How Popular Is “Sign in with Apple”?

#68

Post by pier25 »

sehugg wrote: post #64
habosa wrote: post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

Doing it through Firebase might be easier: https://firebase.google.com/docs/auth/ios/apple

Maybe I'm missing something but isn't that iOS only?

Re: How Popular Is “Sign in with Apple”?

#69

Post by zchrykng »

cptskippy wrote: post #55

We have an on-going issue with Apple's protections going back almost a decade to when they started mucking about with 3rd Party Cookies. This isn't entirely their fault, blame also lies with the vendor we've chosen and our architecture for SSO. That being said, there are valid use cases for tracking users across websites. I work for a nonprofit that does fundraising using every imaginable PaaS or SaaS platform as wel…

Definitely a situation of non-nefarious uses getting nuked along with the nefarious ones. Not sure I would really blame Apple as much as all the horrible people who made it necessary for Apple to build this. They probably should allow more fine grained controls, something like "I know and trust these websites, don't nuke their cookies all the time" setting.
Post reply on HN