So login by Apple seems to be #OpenID Connect with some twist. A huge win for #oidc
4
17
40
lack of code replay protection and proprietary client authentication method?
3
3
Replying to @tlodderstedt @_nat_en
In my testing, I wasn't able to use an authorization code twice. Did you see something different?

Jun 9, 2019 · 3:29 AM UTC

2
Replying to @aaronpk @_nat_en
yes I meant code injection == code replay in the authz response
1
Replying to @aaronpk @tlodderstedt @_nat_en
I assume Torsten meant code injection. When I integrated I couldn’t find any protection against this scottbrady91.com/OpenID-Conn…

Implementing Sign in with Apple in ASP.NET Core

A primer on Sign in with Apple, including an example integration in ASP.NET Core.

scottbrady91.com
1