<div dir="ltr"><div dir="ltr">It seems problematic for IDaaS vendors if users signup/signin to apps with an IDaaS account linked with Apple ID, these apps can not unlink IDaaS account and Apple ID because there are other apps using the same IDaaS account with the same Apple ID.</div><div>I'm just encountering this situation and discussing with app developers about the problem.</div><div><br></div><div>Does anyone have the same issue?</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">2022年6月30日(木) 9:05 nov matake via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;">now this guideline applies all developers.<div>see what’s happening...<br><div><br><blockquote type="cite"><div>On Jun 20, 2022, at 13:05, nov matake <<a href="mailto:nov@matake.jp" target="_blank">nov@matake.jp</a>> wrote:</div><br><div><div dir="auto">As a personal developer, I've asked Apple to change their guideline here.<div><a href="https://developer.apple.com/contact/app-store/" target="_blank">https://developer.apple.com/contact/app-store/</a></div><div><br></div><div>I don't think they care about it though :p</div><div><div><div style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;color:rgb(87,96,106);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px"><br></div><blockquote type="cite"><p dir="auto" style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;color:rgb(87,96,106);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px">According to this news, you're starting to mandate Token Revocation on app's account deletion.<br style="box-sizing:border-box"><a href="https://developer.apple.com/news/?id=12m75xbj" rel="nofollow" style="box-sizing:border-box;text-decoration:none" target="_blank">https://developer.apple.com/news/?id=12m75xbj</a></p><p dir="auto" style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;color:rgb(87,96,106);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px">However, not all apps are storing access nor refresh tokens after sign-in process completed, and token revocation is impossible in such case.</p><div style="box-sizing:border-box;margin-top:0px;margin-bottom:0px;color:rgb(87,96,106);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px">You should require token revocation only if the app is storing tokens.</div></blockquote><br><div dir="ltr">iPhoneから送信</div><div dir="ltr"><br><blockquote type="cite">2022/06/20 12:57、Nat Sakimura <<a href="mailto:nat@digitalideas.tokyo" target="_blank">nat@digitalideas.tokyo</a>>のメール:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr">
<div name="messageBodySection">
<div dir="auto">Interesting. We should talk about this in the next AB/C call. </div>
</div>
<div name="messageSignatureSection"><br>
Sent with a <a href="https://sparkmailapp.com/source?from=signature" target="_blank">Spark</a></div>
<div name="messageReplySection">2022年6月19日 21:36 -0600、nov matake via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>>のメール:<br>
<blockquote type="cite" style="border-left:thin solid grey;margin:5px;padding-left:10px">Hi,
<div><br></div>
<div>Apple starts requiring app developers to call their token revocation API on account deletion, if the app is using Sign-in with Apple.
<div><a href="https://developer.apple.com/news/?id=12m75xbj" target="_blank">https://developer.apple.com/news/?id=12m75xbj</a></div>
<div><br></div>
<div>Since not all apps are storing access nor refresh tokens after the sign-in process completed, it seems unavailable for them.</div>
<div><br></div>
<div>Does anyone have communication channel with Apple to discuss this issue?</div>
<div><br></div>
<div>thanks</div>
<div><br></div>
<div>nov</div>
</div>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br></blockquote>
</div>
</div></blockquote></div></div></div></div></blockquote></div><br></div></div>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" rel="noreferrer" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
<br>
</blockquote></div></div>