After Revoking Apple ID (Stop Using Apple ID) not getting full name and email on next login attempt

[michaelbrant]

The FAQs say that in order to receive the full name and email again, you must revoke Apple ID access for the app. After logging out of the app, revoking Apple ID access (Settings > Apple ID > Sign-In & Security > Sign in with apple > My App > Stop Using Apple ID), and then logging in again, I'm still not seeing full name and email in the response. I was also expecting to be prompted to share/ hide my email address but that didn't pop up either.

Here is the code:

async function signInOrRegisterWithApple() {
  const appleAuthRequestResponse = await appleAuth.performRequest({
    requestedOperation: appleAuth.Operation.LOGIN,
    requestedScopes: [appleAuth.Scope.FULL_NAME, appleAuth.Scope.EMAIL],
  });

  const { identityToken, nonce, email, fullName } = appleAuthRequestResponse;

  if (identityToken) {
    const appleCredential = firebase.auth.AppleAuthProvider.credential(identityToken, nonce);

    const user = await firebase.auth().signInWithCredential(appleCredential);

    console.warn(`These values are empty: ${email} ${fullName?.givenName}`);
  } 
}

Other things I've tried:

1. Made sure the order of requestedScopes had Full name first
2. Uninstalled the app and reinstalled + revoke Apple ID access while uninstalled
3. Posted in Apple Community
4. I've tried to revoke the token, at first I was getting[Error: [auth/invalid-credential] The supplied auth credential is malformed or has expired.] but realized this was because I was using firebase local auth emulator. After switching to the hosted firebase auth, revokeToken did work successfully, however, the main problem still persists.

async function revokeSignInWithAppleToken() {
  const { authorizationCode } = await appleAuth.performRequest({
    requestedOperation: appleAuth.Operation.REFRESH,
  });

  if (!authorizationCode) {
    throw new Error("Apple Revocation failed - no authorizationCode returned");
  }

  // Revoke the token
  return auth().revokeToken(authorizationCode);
}

[mikehardy]

Unexpected. Do you have version information of all the components of the system under test (device model number, device operating system, relevant package versions from package.json, xcode version etc)? https://stackoverflow.com/help/how-to-ask

The FAQ you list was developed via experience / test results from users of the library. I personally did not do the testing or observe the results so I don't have the experience to say if it used to work correctly or not. I also do not have time to do the testing now, with apologies.

I'm open to any PR either updating documentation or altering code as needed depending on what you learn via testing and/or any responses you get from the Apple discussions

[wordisthebird]

any update on this?

[MayurMax4]

hi team,
we are also getting the same issue, where email is also not coming after successful authentication. Currently using the version 2.3.0.
Any suggestion will be helpful..

[azulay7]

I waiting also for some solution.
appleAuth.performRequest response does not contains any personal value

[siquick]

Also suddenly getting this issue of no displayName or email. Using version 2.3.0 of library.

Have tried the following:

• Settings > Apple ID, iCloud, iTunes & App Store > Password & Security > Apps Using Your Apple ID, tap on your app and tap Stop Using Apple ID
• Changed app identifier and re-established all credentials from Firebase.

Email address is now also not being stored in Firebase.

Code for Apple Sign In

const appleAuthRequestResponse = await appleAuth.performRequest({
      requestedOperation: appleAuth.Operation.LOGIN,
      requestedScopes: [appleAuth.Scope.FULL_NAME, appleAuth.Scope.EMAIL],
});

[turkmenkaan]

We're having the same issue here. Any update would be very appreciated

[turkmenkaan]

After checking Apple Settings > Sign In, we noticed that the token was not actually revoked in the first place. That's probably why you're not receiving user information upon next login. Not sure what's wrong with the revokeToken method though, it seems to not resolve the promise.

[siquick]

I have managed to get the Apple token revoking by following these setup instructions closely and using this function.

export const deleteAppleUser = async (): Promise<ReturnType> => {
	try {
		// Get an authorizationCode from Apple
		const { authorizationCode } = await appleAuth.performRequest({
			requestedOperation: appleAuth.Operation.REFRESH,
		});

		// Ensure Apple returned an authorizationCode
		if (!authorizationCode) {
			throw new Error("Apple Revocation failed - no authorizationCode returned");
		}

		const result = await auth().revokeToken(authorizationCode);

		return { result, error: null };
	} catch (error) {
		Sentry.captureException(error);
		return { result: null, error };
	}
};

The problem I'm having now is that, even for new users, I am no longer getting the users name, only the email address.

This is my JS function for Sign In

async function onAppleButtonPress() {
		try {
			// Start the sign-in request
			const appleAuthRequestResponse = await appleAuth.performRequest({
				requestedOperation: appleAuth.Operation.LOGIN,
				requestedScopes: [appleAuth.Scope.EMAIL, appleAuth.Scope.FULL_NAME],
			});

			// Ensure Apple returned a user identityToken
			if (!appleAuthRequestResponse.identityToken) {
				throw new Error("Apple Sign-In failed - no identify token returned");
			}

			// Create a Firebase credential from the response
			const { identityToken, nonce } = appleAuthRequestResponse;
			const appleCredential = auth.AppleAuthProvider.credential(identityToken, nonce);

			// Sign the user in with the credential
			return await auth().signInWithCredential(appleCredential);

		} catch (error) {
			console.error(error);
			return { result: null, error };
	}

[Daniel3711997]

The issue still persist

[thangpaisen]

I also encountered this problem in version 2.3.0
Using version 2.2.2 the problem was resolved

[sqpollen]

I am now getting the fullName after the user revokes their access. However, it does not get saved to the user record in Firebase unless I systematically update the profile. Is there a better way to do this than calling auth().currentUser.updateProfile?

const appleAuthRequestResponse = await appleAuth.performRequest({
    requestedOperation: appleAuth.Operation.LOGIN,
    requestedScopes: [appleAuth.Scope.FULL_NAME, appleAuth.Scope.EMAIL],
});

// Ensure Apple returned a user identityToken
if (!appleAuthRequestResponse.identityToken) {
throw new Error("Apple Sign-In failed - no identify token returned");
}

// Create a Firebase credential from the response
const { identityToken, nonce, fullName } = appleAuthRequestResponse;
const appleCredential = auth.AppleAuthProvider.credential(identityToken, nonce);

const userCredential = await auth().signInWithCredential(appleCredential);

//Update the profile with the fullName
if (fullName) {
  const update = {
	  displayName: `${fullName.givenName} ${fullName.familyName}`,
	  photoURL: "",
  };
  await auth().currentUser.updateProfile(update);

}

[moustafahelmi96]

have the same issue

[MrNapcae]

have the same issue

[aboveStars]

Having the same issue.
Edit: I realized that this issue only exists on iOS Simulators not on real devices.

[nroV]

any solution?

[toppsdown]

I was running into this on my simulator. Didn't get email field in the decoded JWT, and it was null in the initial auth response. Clearing the login from Apple Id logins didn't work.

I logged out of iCloud entirely and deleted my app from the simulator. That seemed to fix the issue. I'm not seeing the expected behavior of email present in auth response of first auth attempt, then in the JWT on subsequent attempts.

[danest]

I am running into this issue as well. I can't revoke to show the apple sign in popup again

[Zaryyab-Dev]

Still running into the same issue. Even after revoking I cant get email and name again when I try to login with apple

[umairiqbal78]

@Zaryyab-Dev I logged out of my iCloud ID from my device and then logged in again. After that, I tried signing in with Apple from the app, and it worked.

[shanmugam105]

@Zaryyab-Dev I logged out of my iCloud ID from my device and then logged in again. After that, I tried signing in with Apple from the app, and it worked.

You saved my day

[cbdeveloper]

Yeah, I'm getting something similar on iPhone 14 Plus (simulator) iOS 16.4.

This flow does not work:

• User was successfully signed up via Apple;
• I delete the user from Firebase Auth;
• I tried both revoking and not revoking the token at this point, with same result;
  • EDIT: revoking the token does seem to make a different whether the Firebase user will be created with/without email identifier. At least on my tests, for several times, I was being prompted for sharing my email (after sign out-in from iCloud), and still Firebase user was being created without email. Once I revoked the token, the subsequent new user had an email.
• User tries to sign-in with Apple again;
• User is prompted only for password without the Share/hide my email options;
• User successfuly signs in, but a user without email is created in Firebase Auth:

And if I do the flow above, and then sign-out and sign-in from iCloud, and try to sign-in again without deleting the user, user is now prompted to Share/hide my email and then that same user that was created without email, will now show the email in Firebase Auth.

This flow works:

• User was successfully signed up via Apple;
• I delete the user from Firebase Auth;
• I tried both revoking and not revoking the token at this point;
• -----> Manually sign-out and sign-in from iCloud on the simulator
• User tries to sign-in with Apple again;
• User is prompted both for password and Share/hide my email options;
• User successfuly signs in, and a I can see the user's email;

This is the sign-in code that I got from the docs:

async function onAppleButtonPress() {
    // 1). start a apple sign-in request
    const appleAuthRequestResponse = await appleAuth.performRequest({
      requestedOperation: appleAuth.Operation.LOGIN,
      requestedScopes: [appleAuth.Scope.EMAIL, appleAuth.Scope.FULL_NAME],
    });

    // 2). if the request was successful, extract the token and nonce
    const { identityToken, nonce } = appleAuthRequestResponse;

    // can be null in some scenarios
    if (identityToken) {
      // 3). create a Firebase `AppleAuthProvider` credential
      const appleCredential = firebase.auth.AppleAuthProvider.credential(identityToken, nonce);

      // 4). use the created `AppleAuthProvider` credential to start a Firebase auth request,
      //     in this example `signInWithCredential` is used, but you could also call `linkWithCredential`
      //     to link the account to an existing user
      const userCredential = await firebase.auth().signInWithCredential(appleCredential);

      // user is now signed in, any Firebase `onAuthStateChanged` listeners you have will trigger
      console.warn(`Firebase authenticated via Apple, UID: ${userCredential.user.uid}`);
    } else {
      // handle this - retry?
    }
  }

I haven't tried on a real device yet.

Version: "@invertase/react-native-apple-authentication": "^2.4.0"

I have downgraded to v2.2.2 and got the same behavior.

My question is:

Besides signing-out-and-in from iCloud, is there another way to make sure to prompt the user for Show/hide my email on their next login attempt?

It's fine if we don't get name and email on subsequent logins, but not right after deleting the user from Firebase auth, as it creates a user without email identifier.

---

For example, with @react-native-google-signin/google-signin, this is what I do to make sure the user will be prompted for choosing Google account on the next sign-in attempt:

await firebase.auth().signOut();
await GoogleSignin.signOut(); // This ensures user is prompted for choosing Google account

[cbdeveloper]

Even worse is that this issue might cause users to end up with 2 firebase auth, one for Apple and one for Google, even when my Firebase Auth is configured to merge accounts with the same email automatically.

This is the flow:

• User deletes their account
• User signs in with Apple. Buggy sign-in. User without email identifier is created.
• User signs in with Google. User with email identifier is created.
• User signs out-in from iCloud on their device
• User signs in with Apple again, the user without email identifier is updated with email, but not merged with the Google.

[cbdeveloper]

Just replying to my own comments above.

I just tested on a real device and the whole delete account and recreate account flow worked flawlessly.

After deleting the account and revoking the token, user was again prompted to share their email and everything worked out fine.

Maybe this issue I've described only happens in the simulator or maybe it was related to my Expo dev build (with the expo dev client).