Hey all! My team and I have been looking into possible ways to integrate our [future] Discourse instance into our mobile application - Noom. Our iOS app is written in Objective-C with some Swift, and our Android application is written in Java with some Kotlin. We’ve been debating between full integ…

There is a new way of authentication. However the documentation is yet to be released. [image] Delegated authentication for Discourse Mobile app Development Originally when we built the mobile app Apple offered seamless embedding of Safari in mobile apps.…

I’m going to update the documentation about delegated authentication soon, but I can give you some pointers right here. First you need to open a browser session to discourse.site/user-api-key/new with the following parameters: scopes: 'notifications,session_info,one_time_password', client_id: YOUR…

@hosna + @pmusaraj Thank you both! I will pass this information along to our QA director.

[image] pmusaraj: I will write a proper documentation shortly, but this should help you get started. @pmusaraj hey, is there already any official documentation available to the public? I’d love to dig deeper.

I’m going to tackle this exact thing over the next few days, I will update on my success or failure. If anyone has any guides or pointers I’d welcome them :slight_smile:

I think you’re looking for User API keys specification and specifically the section " API key generation flow".

Hey Penar, thanks for the guidance, I’m far from an expect in this stuff, I havent done much with any cryptography, or apis like this before and was wondering if you could provide some help as to how to encode some of these parameters? I’m looking at your DiscourseMobile app but I have never used JS…

[image] xceph: nonce and client_id - Are these just random 16 and 32 byte strings hex encoded? public_key - Any guidance on how to generate this? I’m trying to use the resource here which would leave me with a SecKeyRef, am I to convert this to NSData and then UTF8 encode? nonce is a random …

Hey Penar, thanks for the links very useful. I’m making progress but believe I’m formatting my public key incorrectly, how does the formatting on this look? https://myserver.com/user-api-key/new?client_id=11223344556677889900AABBCCDDEEFF11223344556677889900AABBCCDDEEFF&nonce=11223344556677889900A…

I just published a script to do this exact thing @xceph . Check Generating User API Keys for testing .

Authentication Protocol re: App Integration

Development

hosna (hosna) April 11, 2019, 6:48pm 2

There is a new way of authentication. However the documentation is yet to be released.

Topic		Replies	Views
Delegated authentication for Discourse Mobile app Development	13	3116	April 29, 2019
Automatic Login from iOS/Android app Support	2	4601	August 15, 2016
iOS app integration Feature	5	2372	August 21, 2015
Use discourse for SSO in a non-web app? Development	12	4734	August 5, 2022
Can I develop an mobile app then use the discourse:// scheme? Development	10	174	September 29, 2025

Authentication Protocol re: App Integration

Related topics