OpenID Connect client library for iOS
The toolkit is standards compliant, works with iOS 7+, and follows the best current practises:
-
The user is presented to the IdP login page in a web view that is controlled by the browser (SFSafariViewController), instead of using the traditional web view embedded into the app itself (UIWebView). This prevents the app from snooping on the user’s login credentials, and also enables users to benefit from the browser password manager.
-
The callback URIs for receiving the OpenID authentication response from an IdP can use custom schemes, or Universal Links.
-
Support for the PKCE security extension for public clients.
Maintainers of the project are William Dennis and Steven Wright.
You can watch Williams’s talk at the OpenID Summit in Tokyo last year where he presents the AppAuth project.