Account deletion requirements

[Gillissie]

In reference to...
https://developer.apple.com/news/?id=12m75xbj#:~:text=As%20a%20reminder%2C%20apps%20that,1(v).

Apple says "If your app offers Sign in with Apple, you’ll need to use the Sign in with Apple REST API to revoke user tokens when deleting an account."

Is this something you plan on adding to this plugin? I mean revoking user tokens.

[lupidan]

No.

The REST API should be something you use from your backend, not from the client.

[Gillissie]

Ok, that makes sense. Does this mean we're supposed to store the user token that is given when the user signs in, so we can revoke it later? If so, can you confirm how we get that token?

[lupidan]

Does this mean we're supposed to store the user token that is given when the user signs in, so we can revoke it later?

Well, yeah...

can you confirm how we get that token?

All tokens are obtained as a IAppleIdCredential after the user performs a SIWA attempt. It's your obligation to send that info to your backend for that particular user.