Post not yet marked as solved
The revoke tokens endpoint (/auth/revoke) is the only way to programmatically invalidate user tokens associated to your developer account without user interaction. This endpoint requires either a valid refresh token or access token for invalidation, as Sign in with Apple expects all apps to securely transmit and store these tokens for validation and user identity verification while managing user sessions.
If you don’t have the user’s refresh token, access token, or authorization code, you must still fulfill the user’s account deletion request and meet the account deletion requirement. You'll need to follow this workaround to manually revoke the user credentials:
Delete the user’s account data from your systems.
Direct the user to manually revoke access for your client.
Respond to the credential revoked notification to revert the client to an unauthenticated state
Important: If the manual token revocation isn’t completed, the next time the user authenticates with your client using Sign in with Apple, they won’t be presented with the initial authorization flow to enter their full name, email address, or both. This is because the user credential state managed by Sign in with Apple remains unchanged and returns the.authorizedcredential state, which may also result in the system auth UI displaying the “Continue with Apple” button.
Respond to the credential revoked notification
Once the user’s credentials are revoked by Apple, your client will receive a notification signaling the revocation event:
For apps using the Authentication Services framework to implement Sign in with Apple, register to observe the notification named credentialRevokedNotification.
For web services, if an endpoint is registered for server-to-server notifications, Apple broadcasts a notification to the specified endpoint with the consent-revokedevent type.
When receiving either notification, ensure you’ve already performed the following operations to meet the requirements of account deletion:
Deleted all user-related account data, including:
The token used for token revocation;
Any user-related data stored in your app servers; and
Any user-related data store in the Keychain or securely on disk in the native app or locally on web client.
Reverted the client to an unauthenticated state.
Securely store user tokens for account creations
For all new user account creations, follow the expected authorization flow below:
Securely transmit the identity token and authorization code to your app server.
Verify the identity token and validate the authorization code using the /auth/token endpoint.
Once the authorization code is validated, securely store the token response — including the identity token, refresh token, and access token.
Validate the refresh token up to once per day with Apple servers (to manage the lifetime of your user session and for future token revocation requests), and obtain access tokens (for future token revocation, app transfer, or user migration requests).
For information about verifying an identity token and validating tokens, visit Verifying a user and Generate and validate tokens.
If you have questions about implementing these flows, including client authorization, token validation, or token revocation, please submit a Technical Support Incident.
Posted
by
ForumsContributor
Post not yet marked as solved
Looking to go for a full launch soon, trying to finish for you and cross-sync functionality and getting started on making new theming, icons and other premium level options. My app is ad free and I want this to be a one-stop app for active trackers and casual ones as well.
Post not yet marked as solved
We believe we need new news and information platforms that enable people to stay connected to their topics of interest, whether through text or audio, enabling curation and engagement but without the noise of social media. Check it out and tell us what you think.
Please leave feedback:
Here in the comments
Via the app contact / comments under your a/c
This google form https://docs.google.com/forms/d/e/1FAIpQLSfbeSCvCPOyNRuMOAK1nCAg6nAXP6_0cXoYe8TR5Ly1WBst8A/viewform
Post not yet marked as solved
We believe we need new news and information platforms that enable people to stay connected to their topics of interest, whether through text or audio, enabling curation and engagement but without the noise of social media. Check it out and tell us what you think.
Post not yet marked as solved
Cardary is a flashcard app. It uses spaced repetition to help you study and review. It is suitable for learning languages, preparing for exams and learning in various subjects.
[Cardary Features]
Millions of pre-made cards covering various subjects, majors, exams, interests and other fields.
Powerful card making capabilities, supporting Excel batch import, making it easy to create your own cards.
Cardary supports a variety of deck types, which can meet the learning needs of different users and provide the best learning experience.
The interface is clean, the functions are concise and applicable, focusing on memory without interruption.
Data is synchronized across multiple devices, supporting mobile phones, tablets, desktops and other devices, so you can review anytime, anywhere.
[Pre-made Decks]
Languages: English/French/German/Italian/Spanish/Chinese/Japaneses and more.
Science: Computer/Medicine/Engineering/Physic/Biology/Chemistry and more.
Social Science: Bussiness/Law/Economics/Political and more.
Arts and Humanities: History/Music/Philosophy/Dance and more.
Math: Foundation/Probability/Statistics/Precalculus and more.
Other: Vocations/Driving test/Hobbies and more.
Home Page: https://cardary.aibase.biz/
iOS App: https://apps.apple.com/us/app/cardary/id6475381563
Android App: https://play.google.com/store/appsdetails?id=biz.aibase.cardary
Post not yet marked as solved
I would like to introduce my side project, which has been in development for a year now.
You can track and split your group expenses. In the next versions, I plan to add bill recognition and some integrations with Open Banking systems in Europe.
Current app version is built with React Native connected to Google Firebase backend.
Looking forward for you feedback and feature requests.
Post not yet marked as solved
As an APP developer I always encounter problems when trying to find good testers for the apps and I especially miss having a way to encourage users to send feedback.
With this in mind I developed an initial version of an application called "Test My App/Test An App".
What's in this Beta version:
Account creation for anyone who wants to test apps
Profile creation for developers to publish their apps. (The functionality to publish APPs is already implemented and its free to use)
I have already published some of my APPs for testing but as soon as developers register they will publish theirs.
All users receive notification when a new APP is published.
Testers are able to record the interaction with the apps to be tested and share them with the developer.
Testers are able to send contributions to the developer (comments, bug reports, feature suggestions, APP evaluation, etc.), with images and videos. (The contributions are visible to all other testers).
Users earn XP and can level up as they test the applications.
Users earn Badges for their contributions.
Anyone who registers during the Beta period will receive an exclusive badge
Post not yet marked as solved
Hi, Am trying to make an anime and manga tracker app with options to sync up third party integrations within the app. Plus it is it’s own tracker.
I’ve been working on the side on this and am trying to put out a high quality anime tracker in the store. I need help to close it the bugs
Post not yet marked as solved
We would greatly appreciate someone testing our app and giving us feedback.
It is an open social network that finds users who are physically similar. And why the similarity? Because on the basis of similarity mutual sympathies can arise. You know it. You listen to the same music, you have similar opinions as me, you look the same as me, so I like you.
In the app, users can share photos. We emphasize the use of the entire mobile display. You can also lock some photos and pay to unlock them.
The application is localized only in the following languages: English, Spanish, German, Czech and Slovak.
Minimum version iOS 13.0
