Revive node-apple-sign

⚠️ Caution: Pull request still in progress!
Feedback is welcomed!

Revive development of node-apple-signin!

After trying to contact the original node-apple-signin owner alaborderie about helping out maintaining the library, but didn't get back a response. As I saw that compared to other "apple sign in" libraries this one seemed to have the biggest community wanting to improve it. Multiple opened issues and pull-requests that are sitting opened for months.

As on npm there still isn't a go-to package for apple sign in, so taking matters in my own hands and forking library and implementing most changes from their PR and fixing issues. Trying to make it the go-to choice when you want to implement Apple Sign In.

^ Related

Changes

API

• Changed createClientSecret()

  • Now only takes in privateKey contents instead of a file path. Now you can use it to inject private key trough environmentals. Closes Private key must be a file Techofficer/node-apple-signin#4.
    Add support for privateKey as a string Techofficer/node-apple-signin#5

  • Support for privateKeyPath is kept in the library, but it is moved to a new function createClientSecretFromPath() (see below). It was done so we keep the function functional without overloading its behaviour depending on props.

• Added createClientSecretFromPath()

  • Similar to createClientSecret() but instead of a public key it takes in a path to it. Internally it synchronously (as before) reads the private key contents and calls createClientSecret().

    ❓ Like to see feedback on this, as I'm not yet 100% I want to separate the functions.

  • Added new optional expirationDuration option, which allows setting the clients secret expiration time, instead of using the max allowed 6 months. If not set, defaults back to 6 months.

• Removed getApplePublicKey() in-favour of getApplePublicKeys()

• Added getApplePublicKeys()

  • Now properly returns all public keys instead of just the first one. Closes Add support for multiple apple public keys Techofficer/node-apple-signin#8 and Fix unused keys in https://appleid.apple.com/auth/keys leading to invalid signatures Techofficer/node-apple-signin#9

• Changed getAuthorizationToken():

  • made options.redirectUri optional. Closes ✨Make redirect_url optional in refreshAuthorizationToken Techofficer/node-apple-signin#12, make 'redirectUri' optional on 'getAuthorizationToken' Techofficer/node-apple-signin#7

• 🐛 Fix getAuthorizationUrl():

  • 🐛 Bugfix didn't fallback scope to email if didn't limited
  • Removed openId scope, as I found no official documentation or their browser js library using that scope

• Misc:

  • Throughout all options renamed clientID to clientId to keep in consistent with teamId, clientSecret

Internal

• Dropped deprecated request-promise-native for axios

Improved Developer experience

• Source code now fully typed using typescript with support for Node.js >= 10 (a.k.a ES2018)

• Comes bundled with typescript types

• 📕Auto-generated docs using typedoc! Still needs work on documenting functions/interfaces to become more user friendly, so PR's welcomed!

  

• Improved formating by migrating from eslint-config-airbnb-base to standard + prettier

• 🔧Layed down the groundwork for unit tests using ts-jest

TO-DO

• Rename library - to avoid conflicting search and having to publish under user scope @renarsvilnis/node-apple-signin.
• Possibly implement - Using jsonwebtoken validation + ignoreExpiration when verifying Techofficer/node-apple-signin#2
• Make redirectUri optional - ✨Make redirect_url optional in refreshAuthorizationToken Techofficer/node-apple-signin#12, redirectUri should be optional on getAuthorizationToken Techofficer/node-apple-signin#6, make 'redirectUri' optional on 'getAuthorizationToken' Techofficer/node-apple-signin#7
• Implement response Mode Techofficer/node-apple-signin#3 PR into code
• Finish implementing changes from Add support for multiple apple public keys Techofficer/node-apple-signin#8 and Fix unused keys in https://appleid.apple.com/auth/keys leading to invalid signatures Techofficer/node-apple-signin#9
• Finish documenting API changes
• Setup GH pages
• Finish setup eslint
• Setup githooks, npm script hooks:
  • Setup pre-commit linting
  • Setup pre-commit documentation generation
  • Figure out how to setup doc automatic build so on merges it's done automatically without merge issues.
  • Setup npm hook for building lib before publishing
• Validate LICENSE
• Update README.md to reflect changes