Micro.blog

Sign up now

free 30-day trial

Sign In

Discover

Pricing

Help

kimahlberg
kimahlberg

@danielpunkass @manton I listened with great interest to your discussion about OAuth on Core Intuition 350 as I've spent the last month unsuccesfully trying to get an app doing the OAuth "browser dance" to pass Mac App Store review.

The reviewer is adament in claiming it is unaccceptable to link out to the browser for the authentication flow, but they have not provided guidance on acceptable workarounds (TBH I'm not sure they understand what OAuth is).

I hadn't heard of AppAuth, which sounds worth investigating. Thanks for mentioning it.

|
Embed
danielpunkass
danielpunkass

@kimahlberg Oh that sounds frustrating! One more thing for me to look forward to.

|
Embed
manton
manton

@kimahlberg @danielpunkass I assume the reviewer doesn't like that something in the OAuth flow links to signing up for another service? Probably need very minimal browser-based auth screens to make Apple happy (and of course that might be outside your app's control).

|
Embed
kimahlberg
kimahlberg

@manton Despite the back and forth I haven’t been able to establish if this is the case. Sometimes it sounds like they take issue with links on the auth form (to privacy policy, end user agreement, FAQ), but mostly the rejections are phrased as being about Safari being launched. Yes, it’s been a frustrating fall 😏

|
Embed
EddieHinkle
EddieHinkle

@kimahlberg I have an iOS app that has run into a similar issue. The issue they had with my app is that on iOS it opened in Safari rather than an in-app SFAuthenticationController intended for OAuth. If SFAuthenticationController exists on macOS, using that might get you approved.

|
Embed