I opened a ticket on the developer support forum: forums.developer.apple.com/m…
1
Another question: did you manage to exchange the authorization code provided by the Apple Sign In framework on iOS for a token using the REST API? I'm getting "invalid_grant".
2
1
Hi, Jeroen. Did you manage to figure out what was causing the "invalid_grant" error for you? I'm implementing Sign in with Apple right now and I'm also getting "invalid_grant". 🤔
1
Nope. It's still on our backlog to fix someday, but I'm waiting for their implementation to be more stable.
1
1
Ah, that’s a shame. It seemed to be going well so far and I thought I'd be done today but since getting "invalid_grant" I've made no progress (I'm using it in an Expo app). I've seen it mentioned in a few places but nobody seems to have a solution. Thanks for the quick reply. 👍
1
They pushed out some changes a little bit ago and I have been able to exchange the authorization code and get the user info now! I updated my post so maybe take a look through it again. developer.okta.com/blog/2019…
1
1
Hi, Aaron. Thanks for the link to your great article. Unfortunately, for me, I still can't get past the "invalid_grant" issue. I'm doing this for an Expo (React Native) app so things are slightly different in that I don't need redirect_url, etc. but generally it's the same. Hmm.
1
Why do you say you don't need a redirect_uri? That's probably the problem if you're not including it.
1
As I'm also using Expo, I followed the following to start with and there was no redirect_uri used.
medium.com/appandflow/eli5-s…
I tried with one and it didn't make a difference. Also, in Apple's documentation, it doesn't show redirect_uri as being required.
developer.apple.com/document…
1
Huh I missed that in their docs. My next guess is your client secret JWT isn't being generated properly. Try generating it with the Ruby code in my post, it's very picky.
Nov 6, 2019 · 3:02 PM UTC
1



