Skip to content

[BUG] Apple Sign-In: Add support for response_mode=form_post when requesting name or email scopes #1357

@tfraley

Description

@tfraley

Body:

When configuring “Sign In with Apple” as an OAuth provider, Apple requires that if you request the name or email scopes, the authorize request must include response_mode=form_post. Otherwise, you receive the following error on login:

invalid_request
response_mode must be form_post when name or email scope is requested.

Currently, Fider’s provider configuration does not support adding custom/extra auth parameters, nor does it appear to automatically add this param for Apple. This means Sign In with Apple only works with the minimal openid scope (which provides no user info), and prevents receiving the user’s name/email as described in Apple’s docs.

Feature Request:
Please add support for setting custom authorization parameters—specifically, so Fider can send response_mode=form_post when name or email is requested from Apple.

References:

Impact:
Without this, “Sign in with Apple” in Fider can only provide pseudonymous Apple user IDs, and cannot collect user name/email for app onboarding or integration with existing registration flows.

Metadata

Metadata

Assignees

Labels

type: bugsomething is broken, we need to fix it

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions