Hi, We discussed this before, using the swift iOS libs for cordova is not really great. When building cordova app as a developer I shouldn’t have to fire up Xcode to run or test my applications. Because the project that is used by cordova right now doesn’t support swift you’ll have to change settings in Xcode after installing the plugin to make it work again. So I suggest for the Oauth2 plugin we make it a javascript only plugin and depend on the inappbrowser, in this specific case I don’t think using the native parts will improve security (correct me I’ve I’m wrong) This will enable us to keep our roadmap and in time cordova will merge our PR and swift will be supported. WDYT, Erik Jan _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-dev

So the idea is to make use of implicit grants like JS does, right? And this is what you're suggesting https://docs.auth0.com/native-platforms/cordova ?

Gotcha, so the idea is to make use of the same approach from ag-js?

But with implicit grant you won't get refresh tokens. So you dont offer the same fluid features like the natives experience... ++ Corinne Sent from my iPhone > On 11 nov. 2014, at 13:12, Erik Jan de Wit <edewit(a)redhat.com&gt; wrote: > > >> On 11 Nov,2014, at 13:10 , Bruno Oliveira <bruno(a)abstractj.org&gt; wrote: >> >> Gotcha, so the idea is to make use of the same approach from ag-js? > > Right, but then use InAppBrowser so that you can use it more easily on cordova > _______________________________________________ > aerogear-dev mailing list > aerogear-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/aerogear-dev _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-dev

On Nov 11, 2014, at 8:34 AM, Corinne <corinnekrych(a)gmail.com&gt; wrote: That's the point of proving a cordova plugin to store those tokens in natives secured storage. Doing a cordova plugin with implicit grant miss the point. Sent from my iPhone > On 11 nov. 2014, at 13:39, Erik Jan de Wit <edewit(a)redhat.com&gt; wrote: > > I thought, correct me if I’m wrong, that mobile and javascript apps cannot use anything other then implicit grant. As the whole switching to the browser can be intercepted and therefore mobile client cannot be trusted to keep the secret. > >> On 11 Nov,2014, at 13:20 , Corinne <corinnekrych(a)gmail.com&gt; wrote: >> >> But with implicit grant you won't get refresh tokens. >> So you dont offer the same fluid features like the natives experience... >> >> ++ >> Corinne >> >> Sent from my iPhone >> >>> On 11 nov. 2014, at 13:12, Erik Jan de Wit <edewit(a)redhat.com&gt; wrote: >>> >>> >>>> On 11 Nov,2014, at 13:10 , Bruno Oliveira <bruno(a)abstractj.org&gt; wrote: >>>> >>>> Gotcha, so the idea is to make use of the same approach from ag-js? >>> >>> Right, but then use InAppBrowser so that you can use it more easily on cordova >>> _______________________________________________ >>> aerogear-dev mailing list >>> aerogear-dev(a)lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/aerogear-dev >> >> _______________________________________________ >> aerogear-dev mailing list >> aerogear-dev(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/aerogear-dev > > > _______________________________________________ > aerogear-dev mailing list > aerogear-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/aerogear-dev _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-dev

On 11 nov. 2014, at 15:33, Erik Jan de Wit <edewit(a)redhat.com&gt; wrote: So I might be to paranoid, but with security there is no such thing as being to paranoid. So if a javascript based Cordova plugin with InAppBrowser makes no sense then I suggest postponing the OAuth2 plugin until swift is supported by Cordova. _______________________________________________ aerogear-dev mailing list aerogear-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-dev