prasanthu

   let APIIdentifier = "http://google_api" 
        Auth0
            .webAuth()
            .audience(APIIdentifier)
            .scope("openid profile email")
            .connectionScope("email")
            .start {
                switch $0 {
                case .failure(let error):
                    // Handle the error

prasanthu

    fileprivate func showLogin() {
        guard let clientInfo = plistValues(bundle: Bundle.main) else { return }
        
        //let APIIdentifier = "https://" + clientInfo.domain + "/userinfo" // Replace with the API Identifier value you created
        let APIIdentifier = "http://google_api" // Replace with the API Identifier value you created
        Auth0
            .webAuth()
            .audience(APIIdentifier)
            .scope("openid profile email")
            .connectionScope("email")

prasanthu

commit 5c3ca37f03db5eb842e7abfdd7c857548934caa7
Author: Prasanth Ullattil <prasanth@telenordigital.com>
Date:   Mon Apr 8 21:09:57 2019 +0200

    Fix the build settings
    
    This will make sure we use  Development.xcconfig

diff --git a/Pods/Pods.xcodeproj/project.pbxproj b/Pods/Pods.xcodeproj/project.pbxproj
index 3b10e15..3749c27 100644

prasanthu

AWS KMS support for OAuth2 Client Credentials JWT authentication

The current implementation signs the client assertions using the signing_key.private_key value specified in the configuration. AWS KMS only allows to sign data using the signing API. The keyID, algorithm and the message(or digest) are the only parameters required for this API.

Generating base64 encoded signature

When used with the ECDSA_SHA_256, ECDSA_SHA_384, or ECDSA_SHA_512 signing algorithms, the signature value is a DER-encoded object as defined by ANS X9.62–2005 and RFC 3279 Section 2.2.3. This is the most commonly used signature format and is appropriate for most uses. We need to perform the following steps to convert the DER-encoded object to a valid signature

1. Retrieve r & s values from the encoded structure
2. Compute signature size based on algorithm and size of r and s values

prasanthu

services:
  - name: controlplane
    url: https://api.example.net/controlplane
    credentials:
      oauth2:
        grant_type: client_credentials
        token_url: https://api.example.net/as/token.oauth2
        client_id: ca3a5293-588a
        include_jti_claim: true
        aws_kms: