Questions about SIWA support

[kaishin]

After searching the docs, Discord, and this repository, I couldn't find any mentions of SIWA (Sign in with Apple) or other social auth options outside of Cognito. I might be missing something obvious but how can I go about adding support to SIWA in my app? I come from Vapor where support is built-in so I was wondering how much of that can be reused.

[adam-fowler]

I keep meaning to write a SIWA example. All the components are there to build SIWA authentication.
Out of interest where is the built-in support for SIWA in Vapor?

[adam-fowler]

Jwt-kit is available to use in Hummingbird so the core functionality is available.

[kaishin]

@adam-fowler By core functionality do you mean the Apple JWT payload? If so then yes, that is part of jwt-kit. From a cursory look the logic to fetch the keys, store them in memory, and use it to verify isn't however. An example would definitely help me and others who want to get started with SIWA without implementing the aforementioned business logic themselves but feel free to disagree!

[adam-fowler]

I have a half built example here hummingbird-project/hummingbird-examples#138. It does the core of the work here https://github.com/hummingbird-project/hummingbird-examples/blob/siwa/sign-in-with-apple/Sources/App/SignInWithApple.swift.

The example assumes you are using Sign in with Apple from a website but could be easily edited to work with an iPhone app. The contents of the ASAuthorizationAppleIDCredential is almost identical to the AppleAuthResponse the siwaRedirect route expects.

[kaishin]

Thanks for taking a stab at it! Happy to give it a spin and help get the PR merged.

[adam-fowler]

Yeah my main problem with the example at the moment is there is no easy way to return the access, id keys to the web client. I'm wondering if it's even worthwhile generating them and instead just create a cookie based session.

If you are working with an iOS app you will need those keys though.