Skip to content

Sign in with Apple: hide private key on Authentication Middleware #30

@hippogamesunity

Description

@hippogamesunity

To avoid storing private keys on a client, it's possible to move signing to Authentication Middleware.
The following API should be implemented in Authentication Middleware:

  • RegisterPrivateKey(privateKeyId, privateKey, clientId) which should be called only once manually from the Unity editor script
  • CreateClientSecret(privateKeyId, teamId, clientId) which returns signed JWT to be used for PerformCodeExchange, RefreshAccessToken and RevokeAccessToken calls.

Metadata

Metadata

Labels

enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions