@aaronpk Hi Aaron, I read your article about Apple Sign In. I'm also having trouble getting the email address from the token, while the sample iOS app does receive the email. I tried a lot of different scopes, but they all result in the same data. Is Apple aware of these issues?
1
I haven't heard any updates yet, but keep an eye on their docs pages.
1
I opened a ticket on the developer support forum: forums.developer.apple.com/m…
1
Thanks! I can't believe they actually replied to it too!
2
Another question: did you manage to exchange the authorization code provided by the Apple Sign In framework on iOS for a token using the REST API? I'm getting "invalid_grant".
2
1
Hi, Jeroen. Did you manage to figure out what was causing the "invalid_grant" error for you? I'm implementing Sign in with Apple right now and I'm also getting "invalid_grant". 🤔
1
Nope. It's still on our backlog to fix someday, but I'm waiting for their implementation to be more stable.
1
1
Ah, that’s a shame. It seemed to be going well so far and I thought I'd be done today but since getting "invalid_grant" I've made no progress (I'm using it in an Expo app). I've seen it mentioned in a few places but nobody seems to have a solution. Thanks for the quick reply. 👍
1
They pushed out some changes a little bit ago and I have been able to exchange the authorization code and get the user info now! I updated my post so maybe take a look through it again. developer.okta.com/blog/2019…

What the Heck is Sign In with Apple?

Sign In with Apple is based on OAuth 2.0 and OpenID Connect, and provides a privacy-friendly way for users to sign in to websites and apps

developer.okta.com
1
1
Hi, Aaron. Thanks for the link to your great article. Unfortunately, for me, I still can't get past the "invalid_grant" issue. I'm doing this for an Expo (React Native) app so things are slightly different in that I don't need redirect_url, etc. but generally it's the same. Hmm.
1
Replying to @darryl_young
Why do you say you don't need a redirect_uri? That's probably the problem if you're not including it.

Nov 6, 2019 · 2:35 PM UTC

1
Replying to @aaronpk
As I'm also using Expo, I followed the following to start with and there was no redirect_uri used. medium.com/appandflow/eli5-s… I tried with one and it didn't make a difference. Also, in Apple's documentation, it doesn't show redirect_uri as being required. developer.apple.com/document…

Generate and validate tokens | Apple Developer Documentation

Validate an authorization grant code delivered to your app to obtain tokens, or validate an existing refresh token.

developer.apple.com
1
Huh I missed that in their docs. My next guess is your client secret JWT isn't being generated properly. Try generating it with the Ruby code in my post, it's very picky.
1
more replies