oidc-hosted-page-ios

Implement MojoAuth OIDC (iOS / Swift)

This expert AI assistant guide walks you through integrating passwordless authentication into an existing iOS application using MojoAuth's Hosted Login Page as an OIDC identity provider via AppAuth for iOS. MojoAuth handles all authentication methods (Magic Links, Email OTP, SMS OTP, Social Login, Passkeys) through its hosted page.

1. Prerequisites

• An existing iOS 15+ application (Swift 5.7+) with a login screen.
• Xcode 14+ installed.
• An active MojoAuth account.
• MojoAuth OIDC Setup Guide
• Required library: openid/AppAuth-iOS.

2. Implementation Steps

Step 1: Configure Application in MojoAuth

1. Log in to the MojoAuth Dashboard.
2. Note your MojoAuth Domain (e.g., your-app.mojoauth.com).
3. Configure the callback URI using a custom scheme (e.g., com.example.myapp://auth/callback).
4. Retrieve Client ID.
5. Enable your preferred authentication methods.

Note: For native/mobile apps, use Authorization Code with PKCE (no Client Secret on the device).

Step 2: Modify the Existing iOS Project

Substep 2.1: Add Dependencies

Add AppAuth via Swift Package Manager:

1. In Xcode, go to File > Add Package Dependencies.
2. Enter: https://github.com/openid/AppAuth-iOS.git.
3. Select the latest stable version and add to your target.

Or via CocoaPods:

# Podfile
pod 'AppAuth'

pod install

Substep 2.2: Configure URL Scheme

Add a custom URL scheme in your Info.plist:

<key>CFBundleURLTypes</key>
<array>
    <dict>
        <key>CFBundleURLSchemes</key>
        <array>
            <string>com.example.myapp</string>
        </array>
        <key>CFBundleURLName</key>
        <string>com.example.myapp</string>
    </dict>
</array>

Substep 2.3: Configure OIDC

Create an auth configuration helper (e.g., AuthConfig.swift):

// AuthConfig.swift
import Foundation

struct AuthConfig {
    static let issuerURL = URL(string: "https://your-app.mojoauth.com")!
    static let clientID = "your_client_id"
    static let redirectURI = URL(string: "com.example.myapp://auth/callback")!
    static let scopes = ["openid", "profile", "email"]
}