Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/templates/zerver/apple-error.md

18 lines
789 B
Markdown
Raw Normal View History

auth: Add Sign in with Apple support. This implementation overrides some of PSA's internal backend functions to handle `state` value with redis as the standard way doesn't work because of apple sending required details in the form of POST request. Includes a mixin test class that'll be useful for testing Native auth flow. Thanks to Mateusz Mandera for the idea of using redis and other important work on this. Documentation rewritten by tabbott. Co-authored-by: Mateusz Mandera <mateusz.mandera@zulip.com>
2020-06-09 12:04:21 +02:00
You are using the **Apple auth backend**, but it is not
properly configured. Please check the following:
* You have registered `{{ root_domain_uri }}/complete/apple/`
as the callback URL for your Services ID in Apple's developer console. You can
enable "Sign In with Apple" for an app at
[Certificates, Identifiers & Profiles](https://developer.apple.com/account/resources/).
* You have set `SOCIAL_AUTH_APPLE_SERVICES_ID`,
apple_auth: Change BUNDLE_ID setting to APP_ID everywhere. The apple developer webapp consistently refers this App ID. So, this clears any confusion that can occur. Since python social auth only requires us to include App ID in _AUDIENCE(a list), we do that in computed settings making it easier for server admin and we make it much clear by having it set to APP_ID instead of BUNDLE_ID.
2020-06-26 12:22:48 +02:00
`SOCIAL_AUTH_APPLE_APP_ID`, `SOCIAL_AUTH_APPLE_TEAM`,
auth: Add Sign in with Apple support. This implementation overrides some of PSA's internal backend functions to handle `state` value with redis as the standard way doesn't work because of apple sending required details in the form of POST request. Includes a mixin test class that'll be useful for testing Native auth flow. Thanks to Mateusz Mandera for the idea of using redis and other important work on this. Documentation rewritten by tabbott. Co-authored-by: Mateusz Mandera <mateusz.mandera@zulip.com>
2020-06-09 12:04:21 +02:00
`SOCIAL_AUTH_APPLE_KEY` and `SOCIAL_AUTH_APPLE_TEAM` in `{{
settings_path }}` and stored the private key provided by Apple at
apple_auth: Change where private key is stored. Changes to a better name apple-auth-key.p8 and removes the extra directory apple.
2020-06-25 13:26:17 +02:00
`/etc/zulip/apple-auth-key.p8` on the Zulip server, with
auth: Add Sign in with Apple support. This implementation overrides some of PSA's internal backend functions to handle `state` value with redis as the standard way doesn't work because of apple sending required details in the form of POST request. Includes a mixin test class that'll be useful for testing Native auth flow. Thanks to Mateusz Mandera for the idea of using redis and other important work on this. Documentation rewritten by tabbott. Co-authored-by: Mateusz Mandera <mateusz.mandera@zulip.com>
2020-06-09 12:04:21 +02:00
proper permissions set.
* Navigate back to the login page and attempt the "Sign in with Apple"
flow again.