Limited Login for Facebook on iOS

[tbence94]

The issue

Facebook FAQ here states the following:

In response to the upcoming changes to ATT enforcement, we made changes to the iOS SDK and the SDK no longer provides valid user access tokens in scenarios where the user opts out of ATT.
...
Our recommendation is that users integrate Limited Login following the official documentation:

As far as I can tell the current @capacitor-firebase/authentication package does not support this Limited Login on iOS.
That's why we got errors when tried to use this:

import { FirebaseAuthentication } from '@capacitor-firebase/authentication'

const result = await FirebaseAuthentication.signInWithFacebook()

The code above resulted in errors like these:

[ FirebaseAuthentication ]  Bad access token: {"code":190,"message":"Invalid OAuth access token - Cannot parse access token"}`
[ FirebaseAuthentication ]  Bad access token: {"code":190,"message":"Invalid OAuth access token data."}

Always code 190 and some message about the token being "bad"/"malformed" etc...

Solution

I forked the repo and played in local until I managed to modify the FacebookAuthProviderHandler.swift code to use the limited login option and log in on my iOS device using the idToken. This also means that accessToken will no longer work!

These sources proved useful for the implementation:

• https://firebase.google.com/docs/auth/ios/facebook-login#implement_facebook_limited_login
• https://developers.facebook.com/docs/facebook-login/limited-login/ios

Here is the implementation / diff:
main...YoloEdu:capacitor-firebase:main

Question

Should this change be merged into the original package?
I am no iOS developer and I am not really familiar with firebase either, so I am not really sure about this.

I feel this should be an issue for a lot of people who use this package for iOS facebook login.
But I did not see any opened issues or PRs regarding this problem.

Could someone take a look at my solution and decide if it's worth merging?

[robingenz]

Yes, I think we need to merge that. I'll try to take a look at it myself over the next few days. Thank you for reporting it.

[tbence94]

Thank you! Let me know if I can help with that.

Also, it might be worth noting here that this solution will result in Android and iOS returning different tokens.
My usage example:

    const result = await FirebaseAuthentication.signInWithFacebook({ scopes: ['email'] })
    // iOS will return idToken, android will return accessToken
    const token = result.credential?.idToken ?? result.credential?.accessToken

[robingenz]

Thanks. I will close this discussion since i created an issue for that, see #834.