React-native-app-auth: IOS Apple rejected- Guideline 4.0 - Design

[charleycesar]

Issue

I tried to submit a new app for revision in apple today and I received this issue.

did anyone find any solution for this?

Guideline 4.0 - Design

We still noticed that the user is taken to Safari to sign in or register for an account, which provides a poor user experience.

Next Steps

To resolve this issue, please revise your app to enable users to sign in or register for an account in the app.

We recommend implementing the Safari View Controller API to display web content within your app. The Safari View Controller allows the display of a URL and inspection of the certificate from an embedded browser in an app so that customers can verify the webpage URL and SSL certificate to confirm they are entering their sign in credentials into a legitimate page.

Resources

For additional information on the Safari View Controller API, please review the What's New in Safari webpage.

Please see attached screenshot for details.

Environment

• Your Identity Provider:
  My own SSO
• Platform that you're experiencing the issue on:
  IOS 11+
• Are you using Expo?
  NO

[kadikraman]

That's strange, I've not seen a rejection like this before. The iOS side of the library is just a bridge of AppAuth-iOS and according to their docs:

iOS 9+ uses the in-app browser tab pattern (via SFSafariViewController), and falls back to the system browser (mobile Safari) on earlier versions

Which says we _are_ using SFSafariViewController. Maybe you could send them a screenshot of the auth page? E.g. here, you can clearly see we're still in-app and you can see the lock and the website url.

[charleycesar]

Sorry I think the SFAuthenticationSession is deprecated.
We need to use ASWebAuthenticationSession instead.

Did you know how to update to use this ASWebAuthenticationSession?

[charleycesar]

Other question is the bridge use to AppAuth-iOS version 1.2.0 they're in 1.4.0 and resolve a lot of bugs and rejected from apple issues.

A solution is upgrade this bridge?

[kadikraman]

Good spot, we should definitely update it. I'll create a PR for it.

[kadikraman]

Just published this as v6.0.0-rc2 🎉

[charleycesar]

Thanks I will try to submission again with v6.0.0-rc2 release.

[MFrat]

@charleycesar, some news? Approved?

[charleycesar]

@MFrat and @kadikraman , Yes I sent with success and they approved without any issues.
Thanks for all