[Auth] Social login with Google and Apple

オープン
  • 何か問題がありますか？
#512 コメント 0 件 リアクション 0 件 担当者 0 名 GitHub で見る

メンテナーはふだん 1 日以内に返信

まだ誰も着手していません。

評価

難易度
5/5
見積もり時間
1週間以上
初心者へのやさしさ
12/100
issue の種類
機能追加
明瞭さ
おおむね明確
活発さ
活発
技術スタック
react-native, typescript
領域
authentication, backend, frontend, mobile

調査の方向性

Start with the auth code in backend/src/modules/auth/, mobile/src/contexts/auth/ and the login screens mobile/src/screens/Login.tsx and frontend/src/pages/Login.tsx, then find where Facebook login is wired in. Most acceptance criteria depend on external Google and Apple OAuth clients, store access and a blocking issue #514, so confirm those exist before writing code. Done means Google and Apple sign-in work in a TestFlight or Play internal build, verified-email accounts link to existing users, and Facebook login is removed.

索引モデルが issue の本文から書いたものです。

説明

agent-ready back-end enhancement :rocket: mobile-app vic-2.0 web-app

Context

VIC 2.0 login is magic link + social login. No passwords and no Facebook login.

Scope:

  • Google sign-in on web, Android and iOS.
  • Sign in with Apple on iOS (required by App Store guideline 4.8 when Google login is offered), and on web if we want parity.
  • Social accounts are linked to the VIC account by verified email. Handle Apple's private relay emails ("Hide my email").
  • Built on VIC's own authentication (no Cognito). "Login with NGO Hub" stays exploratory as an extra provider.

Accounts and access we need

Owned by Commit Global, with access for the Tribus team:

Google

  • Google Cloud project (Commit Global org), with Owner or Editor access for us.
  • OAuth consent screen set up and published (app name, logo, privacy policy and terms URLs, authorized domains); Google verification if we request more than basic scopes.
  • OAuth client IDs: Web (redirect URIs for staging and production), iOS (bundle ID), Android (package name + SHA-1).
  • Google Play Console access, to read the SHA-1 of the Play App Signing key and the upload key.

Apple

  • Apple Developer Program team (Commit Global), with Admin role for us (or the Account Holder does the steps below).
  • App ID with the "Sign in with Apple" capability enabled.
  • Services ID for web sign-in, with the verified domain and return URLs (staging and production).
  • Sign in with Apple private key (.p8), plus its Key ID and the Team ID.
  • Private email relay: register the domain(s) we send email from (magic link, notifications), with SPF/DKIM, so emails reach "Hide my email" addresses.
  • App Store Connect access (App Manager) to submit the build and update the App Privacy details.

Other

  • Expo / EAS project access, to rebuild the apps with the new native config.
  • Place to store the secrets (Google client secret, Apple .p8 key) in the backend environments.

Design

Prototype: https://perch-pic-08148752.figma.site/ → Login. The prototype is indicative; this issue's text wins where they differ.

Acceptance criteria

  • Volunteers can sign in with Google (Android, iOS) and Apple (iOS) in the mobile app; web offers Google if enabled.
  • A social login with a verified email that matches an existing account signs into that account.
  • Apple "Hide my email" users can sign in and receive emails.
  • Facebook login is removed.
  • Works in TestFlight and Play internal builds (real OAuth clients, not Expo Go).

Dependencies

Phase 0. Blocked by #514.

Where to look

  • backend/src/modules/auth/
  • mobile/src/contexts/auth/
  • mobile/src/screens/Login.tsx
  • frontend/src/pages/Login.tsx
主要言語
TypeScript
スター
3
フォーク
2
平均マージ
18分
マージ済み PR（30日）
118

環境構築

はじめの一歩

  1. issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
  2. 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
  3. リポジトリをフォークし、ブランチを切って変更します。
  4. issue 番号を参照したプルリクエストを送ります。

code4romania/vic のほかの issue

code4romania/vic の issue をすべて見る

似ている issue

TypeScript の issue をもっと見る

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。