There is no excludedCredentials parameter on the platform authenticator creation interface of Native API. ASAuthorizationPlatformPublicKeyCredentialRegistrationRequest.
The excludedCredentials parameter is used to prevent the inconsistency between the public keys managed on RP and the private keys managed on authenticator. In particular, a passkey is created for each RPID and user_id. If a user tries to re-register a passkey with the same RPID and user_id, the existing passkey will be overwritten. But there is no way for RP to detect it. This can be confusing for the user as they might see multiple credentials on the RP, but only one on the authenticator.
By the way, there is the excludedCredentials parameter on the security key interface. ASAuthorizationSecurityKeyPublicKeyCredentialRegistrationRequest
I’d like to know if there is a way to specify excludedCredentials on the platform authenticator interface also like the security key interface. Or, is there any way to prevent the credential inconsistency between RP and platform authenticator?
Selecting any option will automatically load the page
Post
Replies
Boosts
Views
Activity
In the document, the token endpoint returns ID Token. And this endpoint can use by auth code and refresh token.https://developer.apple.com/documentation/signinwithapplerestapi/generate_and_validate_tokens#3262048I can get ID Token from this API by using an auth code.But I could not get ID Token by using a refresh token.I think I have to refresh ID Token because ID Token has expiration date.So my question is how can I get ID Token again?Is there any other api to get ID Token by access token?Or do I have to get a new auth code again?