Touch ID not asking user for email options

Hi all,


we are currently having the following two different behaviors when trying to login with 'Sign in with apple'.


Two different behaviors:

  • Logging in via Touch ID:
    • Trying to login with Touch ID does not ask the user, if he wants to hide/share his email --> the user information does not get forwarded to the backend
    • We would like to point out, that the App has been removed from the apps being used by this Apple-ID page.
  • Logging in with the same user through the web page:

    User gets asked if he wants to hide/share his email --> user information gets successfully forwarded to the backend


Do you have any idea, what might cause this issue?


Thank you very much for your inputs and support in advance!



Kind regards,

Patrick Schmidt

Accepted Reply

Dear Christian,


we fixed the issue by updating the values inside the 'scope' query parameter from 'scope=name email' to 'scope=name%20email'.

Apple seems to be already working on a fix for this, but this seems to fix the issue for now.


Hopefully this also helps you on your issue!



Kind regards,

Patrick

Replies

Hi.


We are seeing the same thing!


When a user logs in using TouchID, then the user object is empty when our server attempts to fetch it. This happens with no prior logins.

When the same user logs in using password, we can get the user object containing name and e-mail for the user. Again with no prior logins, as we remove the app from the AppleID between.


This must be a bug somehow, or did no one just care to document it?

In case it is not a bug, then how does one disable TouchID login?


- Christian

Dear Christian,


we fixed the issue by updating the values inside the 'scope' query parameter from 'scope=name email' to 'scope=name%20email'.

Apple seems to be already working on a fix for this, but this seems to fix the issue for now.


Hopefully this also helps you on your issue!



Kind regards,

Patrick

Hi,

The most common reason for this unexpected behavior is using plus-encoding (instead of percent-encoding) in the authorization request query parameters, as mentioned here


scope
The amount of user information requested from Apple. Valid values are name and email. You can request one, both, or none. Use space separation and percent-encoding for multiple scopes; for example, "scope=name%20email".
Please let me know if this does not resolve your issue.