4 ms·
Still not to spec. And no PKCE? Oy.
by sroussey 7y ago
Still not to spec. And no PKCE? Oy.
- evanriley 7y agoBut it is to spec. [0] "Since September 2019 all spec violations have been addressed by Apple, as recorded in the next section. The section thereafter - "Peculiarities" lists specific implementation choices by Apple that differ from what most implementations provide, but are not spec violations per se." [0] - https://bitbucket.org/openid/connect/src/default/How-Sign-in-with-Apple-differs-from-OpenID-Connect.md https://bitbucket.org/openid/connect/src/default/How-Sign-in...
- topspin 7y agoThat list of "peculiarities" is pretty disappointing. The lack of a discovery endpoint is sad; it isn't that difficult to provide and it greatly reduces the obscurity of configuring RPs.