AppAuth-iOS - OAuth 和 OpenID Connect 客户端 SDK

pod 'AppAuth'

pod install

github "openid/AppAuth-iOS"

carthage bootstrap

// 配置授权请求OIDServiceConfiguration *configuration =     [[OIDServiceConfiguration alloc]         initWithAuthorizationEndpoint:authorizationEndpoint                        tokenEndpoint:tokenEndpoint];
OIDAuthorizationRequest *request =    [[OIDAuthorizationRequest alloc] initWithConfiguration:configuration                                                  clientId:kClientID                                              clientSecret:kClientSecret                                                    scopes:@[OIDScopeOpenID, OIDScopeProfile]                                               redirectURL:kRedirectURI                                              responseType:OIDResponseTypeCode                                      additionalParameters:nil];
// 执行授权请求id<OIDExternalUserAgentSession> session =    [OIDAuthState authStateByPresentingAuthorizationRequest:request                                   presentingViewController:self                                                   callback:^(OIDAuthState *_Nullable authState,                                                               NSError *_Nullable error) {    if (authState) {        NSLog(@"Got authorization tokens. Access token: %@",               authState.lastTokenResponse.accessToken);    } else {        NSLog(@"Authorization error: %@", [error localizedDescription]);    }}];

    completion:^(OIDServiceConfiguration *_Nullable configuration, NSError *_Nullable error) {    if (!configuration) {        NSLog(@"Error retrieving discovery document: %@", [error localizedDescription]);        return;    }    // 使用配置进行授权请求}];

[authState performActionWithFreshTokens:^(NSString *_Nullable accessToken,                                          NSString *_Nullable idToken,                                          NSError *_Nullable error) {    if (error) {        NSLog(@"Error fetching fresh tokens: %@", [error localizedDescription]);        return;    }    // 使用新的访问令牌}];

// OIDAuthorizationRequest.h@interface OIDAuthorizationRequest : NSObject <NSCopying, NSSecureCoding>
@property(nonatomic, readonly) OIDServiceConfiguration *configuration;@property(nonatomic, readonly) NSString *clientID;@property(nonatomic, readonly, nullable) NSString *clientSecret;@property(nonatomic, readonly, nullable) NSArray<NSString *> *scopes;@property(nonatomic, readonly) NSURL *redirectURL;@property(nonatomic, readonly) NSString *responseType;@property(nonatomic, readonly, nullable) NSString *state;@property(nonatomic, readonly, nullable) NSString *nonce;@property(nonatomic, readonly, nullable) NSDictionary<NSString *, NSString *> *additionalParameters;
- (NSURL *)authorizationRequestURL;
@end

// OIDTokenResponse.h@interface OIDTokenResponse : NSObject <NSCopying, NSSecureCoding>
@property(nonatomic, readonly) OIDTokenRequest *request;@property(nonatomic, readonly, nullable) NSString *accessToken;@property(nonatomic, readonly, nullable) NSString *tokenType;@property(nonatomic, readonly, nullable) NSDate *expiresIn;@property(nonatomic, readonly, nullable) NSString *idToken;@property(nonatomic, readonly, nullable) NSString *refreshToken;@property(nonatomic, readonly, nullable) NSDictionary<NSString *, NSString *> *additionalParameters;
@end

// OIDAuthState.h@interface OIDAuthState : NSObject <NSCopying, NSSecureCoding>
@property(nonatomic, readonly, nullable) OIDAuthorizationResponse *lastAuthorizationResponse;@property(nonatomic, readonly, nullable) OIDTokenResponse *lastTokenResponse;@property(nonatomic, readonly, nullable) NSString *refreshToken;@property(nonatomic, readonly, nullable) NSError *authorizationError;@property(nonatomic, readonly) BOOL isAuthorized;
- (void)performActionWithFreshTokens:(OIDAuthStateAction)action;
@end