[keycloak-user] Sign in with Apple?

[Jeffrey Sambells]

I’ve been trying to make this work and almost had it using the OICD provider. I can configure it to start the process, goes to Apple's server and authenticates but then when it redirects back to Keycloak, Apple uses a POST request to send back the state and code instead of a GET. It looks like the OIDC provider only supports GET (https://github.com/keycloak/keycloak/blob/master/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java#L457 <https://github.com/keycloak/keycloak/blob/master/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java#L457>) is there any way around this without creating a custom provider?

Thanks,

Jeffrey

> On Sep 17, 2019, at 10:44 PM, Stian Thorgersen <sthorger at redhat.com> wrote:
> 
> If Apple is OIDC compliant it should be possible to configure the generic OIDC provider as well.
> 
> On Tue, 17 Sep 2019, 18:35 Stefan Guilhen, <sguilhen at redhat.com <mailto:sguilhen at redhat.com>> wrote:
> If I'm not mistaken Keycloak doesn't have an Apple Identity Provider ready
> to use, so you would need to create a custom one.
> 
> On Tue, Sep 17, 2019 at 11:11 AM Jeffrey Sambells <
> jeffrey.sambells at quarter4.io <mailto:jeffrey.sambells at quarter4.io>> wrote:
> 
> > Is there a way to configure Sign In with Apple using the existing Keycloak
> > tools or does it require a custom identity provider?
> >
> > Thanks,
> >
> > Jeffrey
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
> > https://lists.jboss.org/mailman/listinfo/keycloak-user <https://lists.jboss.org/mailman/listinfo/keycloak-user>
> >
> 
> 
> -- 
> 
> Stefan Guilhen
> 
> Principal Software Engineer
> 
> Red Hat <https://www.redhat.com/ <https://www.redhat.com/>>
> 
> sguilhen at redhat.com <mailto:sguilhen at redhat.com>    IM: sguilhen
> @RedHat <https://twitter.com/redhat <https://twitter.com/redhat>>   Red Hat
> <https://www.linkedin.com/company/red-hat <https://www.linkedin.com/company/red-hat>>  Red Hat
> <https://www.facebook.com/RedHatInc <https://www.facebook.com/RedHatInc>>
> <https://www.redhat.com/ <https://www.redhat.com/>>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-user <https://lists.jboss.org/mailman/listinfo/keycloak-user>