I understand that Apple does not actually have a discovery endpoint for Sign in with Apple. Since the Issuer field for a new OpenID connection seems to expect one, does this mean that PlayFab is fundamentally incompatible with the only login provider that Apple mandates implementation of?
I've already obtained a JWT from the native API, but I can't actually use Playfab's LoginWithCustomIDRequest because I can't create a valid Connection ID?
Am I doing it wrong?
Hi @Jeff Greenland,
Hi,
>>… does this mean that PlayFab is fundamentally incompatible with the only login provider that Apple mandates implementation of?
According to this Sign in with Apple doc, I don’t think Sign in with Apple supports OpenID connection, the basic sequence is the following, you can see there is no OpenID issuer involved:
Please keep an eye on our blog for updates of PlayFab supporting Sign in with Apple.
>>… LoginWithCustomIDRequest because I can't create a valid Connection ID?
Custom Id has nothing to do with JWT, it’s a custom unique identifier generated by your title, the players can then use it with LoginWithCustomID to retrieve a session identifier from PlayFab so that they can subsequently interact with PlayFab through APIs.
It seems that Sign in with Apple is essentially the same as OpenID Connect, but without a discovery endpoint and a few other minor differences. OpenID Connect discusses the differences here:
I think if the PlayFab LoginWithOpenIdConnect API were able to take in an endpoint (like the one Apple provides in the documentation on Sign in with Apple) instead of a ConnectionID for the discovery endpoint, then it would be possible to use the PlayFab API to use Sign in with Apple securely.
@Brandon Phillips @Jeff GreenlandActually, the product team is working on Sign in With Apple, please keep an eye on our blog:)
And, you can make a feature request about LoginWithOpenIdConnect API taking in an endpoint instead of a ConnectionID.
@Jeff Greenland I found more info here but it seems like there might not be a way to do it securely with PlayFab. Have you figured out a way to do it through OpenID?
@Jeff Greenland Sign in with Apple now works with PF's OpenIdConnect API
3 People are following this question.
