LHOAuth2LoginViewController lets the user do an OAuth2 authentication against a web service without redirecting the user to Safari.app, but instead using a web view inside a modal view controller.
I consider an iOS app to be a public client, as referred in the OAuth2 standard, and that's why the class only supports Implicit Grant. The implicit grant type does not include client authentication, and relies on the presence of the resource owner and the registration of the redirection URI.
With implicit grant, we get the access token directly in the redirect url fragment. Implicit grant does not support refresh tokens.
LHOAuth2LoginViewController *vc =
[[LHOAuth2LoginViewController alloc] initWithBaseURL:@"https://myoauth2server"
authenticationPath:@"/oauth2/authorize/"
clientID:kOAuthClientID
scope:@"read+write"
redirectURL:@"myapp://oauth2"
delegate:self];
// Wrap it in a nav controller to get navigation bar
UINavigationController *navController = [[UINavigationController alloc] initWithRootViewController:vc];
navController.modalTransitionStyle = UIModalTransitionStyleCoverVertical;
// Present view controller
[self presentViewController:navController animated:YES completion:^() {}];Then implement the delegate method:
- (void)oAuthViewController:(LHOAuth2LoginViewController *)viewController didSucceedWithCredential:(NSDictionary *)credential {
// Add the credentials to your favourite http client
// I'm using a custom subclass of AFRESTClient
[[MyHTTPClient sharedClient] setAuthorizationHeaderWithToken:[credential objectForKey:@"access_token"]
ofType:[credential objectForKey:@"token_type"]
expires:[credential objectForKey:@"expires"]];
// Now you can use the client to connect to your api
}Lari Haataja
LHOAuth2LoginViewController is available under the MIT license. See the LICENSE file for more info.