<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">now this guideline applies all developers.<div class="">see what’s happening...<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jun 20, 2022, at 13:05, nov matake <<a href="mailto:nov@matake.jp" class="">nov@matake.jp</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="content-type" content="text/html; charset=utf-8" class=""><div dir="auto" class="">As a personal developer, I've asked Apple to change their guideline here.<div class=""><a href="https://developer.apple.com/contact/app-store/" class="">https://developer.apple.com/contact/app-store/</a></div><div class=""><br class=""></div><div class="">I don't think they care about it though :p</div><div class=""><div class=""><div style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; caret-color: rgb(87, 96, 106); color: rgb(87, 96, 106); font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji"; font-size: 14px;" class=""><br class="webkit-block-placeholder"></div><blockquote type="cite" class=""><p dir="auto" style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; caret-color: rgb(87, 96, 106); color: rgb(87, 96, 106); font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji"; font-size: 14px; -webkit-text-size-adjust: 100%;" class="">According to this news, you're starting to mandate Token Revocation on app's account deletion.<br style="box-sizing: border-box;" class=""><a href="https://developer.apple.com/news/?id=12m75xbj" rel="nofollow" style="box-sizing: border-box; color: var(--color-accent-fg); text-decoration: none; transition: color 80ms cubic-bezier(0.33, 1, 0.68, 1) 0s, background-color 0s ease 0s, box-shadow 0s ease 0s, border-color 0s ease 0s;" class="">https://developer.apple.com/news/?id=12m75xbj</a></p><p dir="auto" style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; caret-color: rgb(87, 96, 106); color: rgb(87, 96, 106); font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji"; font-size: 14px; -webkit-text-size-adjust: 100%;" class="">However, not all apps are storing access nor refresh tokens after sign-in process completed, and token revocation is impossible in such case.</p><div style="box-sizing: border-box; margin-top: 0px; margin-bottom: 0px; caret-color: rgb(87, 96, 106); color: rgb(87, 96, 106); font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji"; font-size: 14px;" class="">You should require token revocation only if the app is storing tokens.</div></blockquote><br class=""><div dir="ltr" class="">iPhoneから送信</div><div dir="ltr" class=""><br class=""><blockquote type="cite" class="">2022/06/20 12:57、Nat Sakimura <<a href="mailto:nat@digitalideas.tokyo" class="">nat@digitalideas.tokyo</a>>のメール:<br class=""><br class=""></blockquote></div><blockquote type="cite" class=""><div dir="ltr" class="">
<title class=""></title>
<div name="messageBodySection" class="">
<div dir="auto" class="">Interesting. We should talk about this in the next AB/C call. </div>
</div>
<div name="messageSignatureSection" class=""><br class="">
Sent with a <a href="https://sparkmailapp.com/source?from=signature" class="">Spark</a></div>
<div name="messageReplySection" class="">2022年6月19日 21:36 -0600、nov matake via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" class="">openid-specs-ab@lists.openid.net</a>>のメール:<br class="">
<blockquote type="cite" style="border-left-color: grey; border-left-width: thin; border-left-style: solid; margin: 5px 5px;padding-left: 10px;" class="">Hi,
<div class=""><br class=""></div>
<div class="">Apple starts requiring app developers to call their token revocation API on account deletion, if the app is using Sign-in with Apple.
<div class=""><a href="https://developer.apple.com/news/?id=12m75xbj" class="">https://developer.apple.com/news/?id=12m75xbj</a></div>
<div class=""><br class=""></div>
<div class="">Since not all apps are storing access nor refresh tokens after the sign-in process completed, it seems unavailable for them.</div>
<div class=""><br class=""></div>
<div class="">Does anyone have communication channel with Apple to discuss this issue?</div>
<div class=""><br class=""></div>
<div class="">thanks</div>
<div class=""><br class=""></div>
<div class="">nov</div>
</div>
_______________________________________________<br class="">
Openid-specs-ab mailing list<br class="">
<a href="mailto:Openid-specs-ab@lists.openid.net" class="">Openid-specs-ab@lists.openid.net</a><br class="">
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" class="">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br class=""></blockquote>
</div>
</div></blockquote></div></div></div></div></blockquote></div><br class=""></div></body></html>