skills.rest
FelixRauch
FelixRauchCOMMUNITY
Explore all skills by this author →
GitHub

authentication

Implement iOS authentication flows with Sign in with Apple and OAuth.

Updated May 10, 2026
Search Tags:#oauth#ios#biometrics#keychain#token validation#sign in with apple#authenticationservices
One-click install
npx skills add https://github.com/FelixRauch/medat-figuren --skill authentication-felixrauch
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: authentication
Source: https://github.com/FelixRauch/medat-figuren/tree/main/.agents/skills/authentication
Command: npx skills add https://github.com/FelixRauch/medat-figuren --skill authentication-felixrauch

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Authentication implementations on iOS often break in subtle ways (missing capabilities, incorrect credential handling, stale sessions, or unvalidated tokens), leading to login failures or insecure account access.

Core Features & Use Cases

  • Sign in with Apple (ASAuthorizationAppleIDProvider): Handle the full Sign in with Apple flow, including identity token and authorization code delivery for server validation.
  • Credential state checking & revocation handling: Detect whether an Apple credential is authorized, revoked, or transferred and update the app session accordingly.
  • OAuth via ASWebAuthenticationSession: Perform third-party authentication using a system browser flow instead of an embedded web view.
  • Password AutoFill integration: Offer saved Keychain credentials using ASPasswordCredential with proper textContentType configuration.
  • Biometric authentication with LAContext: Gate sensitive actions and protect Keychain access using Face ID / Touch ID prompts.

Quick Start

Use the authentication skill to implement Sign in with Apple and OAuth login flows on iOS by capturing ASAuthorizationAppleIDCredential tokens and verifying credential state on app launch.

Frequently Asked Questions about authentication

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement Sign in with Apple using AuthenticationServices on iOS?▼

Implement Sign in with Apple on iOS by using ASAuthorizationAppleIDProvider to request credentials, capturing the identity token and authorization code for server-side validation. You must verify the credential state to detect revocation or transfer events.

What is the best way to handle OAuth third-party login on iOS without an embedded web view?▼

Use ASWebAuthenticationSession to perform third-party OAuth authentication on iOS. This system browser flow securely handles third-party login credentials and prevents the security risks associated with embedded web views.

How does Keychain-safe token handling work for secure iOS session recovery?▼

Keychain-safe token handling stores authentication tokens securely in iOS Keychain, gated by LAContext biometrics. This enables secure session recovery across app launches while protecting credentials with Face ID or Touch ID.

Why does my iOS app fail to detect revoked Apple credentials on launch?▼

iOS apps fail to detect revoked Apple credentials when missing credential state checking on launch. You must query the credential state using ASAuthorizationAppleIDProvider to identify authorized, revoked, or transferred states and update the session.

Can I use LAContext biometric authentication to gate Keychain access on iOS?▼

Yes, you can use LAContext to gate Keychain access on iOS. This biometric authentication method prompts Face ID or Touch ID before retrieving sensitive Keychain items, ensuring secure session recovery and protecting user data.

Do I need server-side validation for Sign in with Apple identity tokens?▼

Yes, server-side validation of identity tokens is required for Sign in with Apple. You must send the identity token and authorization code to your backend to verify the user's identity and prevent unauthorized account access.

Related Skills

Explore More Software Engineering Skills→
onymchatonymchat

authentication

Implement iOS authentication flows with Sign in with Apple, OAuth, and Keychain.

Official
Advanced
gustavscirulisgustavscirulis
114

auth-flow

Generate authentication infrastructure with Sign in with Apple, biometrics, and Keychain storage.

Community
Advanced
harshav167harshav167

authentication

Automate iOS authentication with Sign in with Apple, passkeys, OAuth, and biometric re-auth.

Community
Advanced
Gundlapuriswathiii006Gundlapuriswathiii006

integrations

Manage third-party integration connections in Replit with OAuth and API support.

Community
Advanced