# openid/AppAuth-iOS

iOS and macOS SDK for communicating with OAuth 2.0 and OpenID Connect providers.

Repository: https://github.com/openid/AppAuth-iOS
Canonical: https://ross.abutalabs.com/products/appauth-ios
Homepage: https://openid.github.io/AppAuth-iOS
Language: Objective-C
License: Apache-2.0
License Family: permissive
Topics: oauth2, openid-connect, ios-sdk
Last push: 2026-08-25T17:29:10+00:00

## Health v2 (maintenance only)
Score: 91/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 75, longevity 100
- inputs: {"age_days": 3856, "days_push": 8, "days_rel": 9, "gap_med": 148, "n_releases_24m": 4}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2024, forks 864 (observed 2026-08-28T04:06:06.644052+00:00)

## What it is
AppAuth-iOS is an Objective-C client SDK for iOS, macOS, and tvOS that implements OAuth 2.0 and OpenID Connect authorization flows. It follows RFC 8252 best practices for native apps, using system browsers for auth requests and supporting PKCE, custom URI schemes, and universal links.

## Use cases
- add oauth2 sign-in to an ios app
- implement openid connect authentication on macos
- secure authorization code flow with pkce in a native app
- sign in to a tvos app via the oauth device authorization grant
- refresh tokens and perform actions with fresh tokens
- authenticate against any oidc-compliant provider from swift or objective-c

## When to choose
- you need standards-compliant OAuth 2.0 / OIDC in an iOS, macOS, or tvOS app
- you want RFC 8252 best practices with external user agents instead of embedded webviews
- you need PKCE support for public clients
- you want a mature, OpenID Foundation-maintained SDK

## When to avoid
- you need server-side or web-based OAuth flows
- you require embedded webview-based authentication (explicitly unsupported)
- your authorization server assumes confidential web clients with client secrets
- you are building for Android or cross-platform only

## Facets
- artifact type: library
- maturity: stable
- function: auth, sdk
- domain: security, mobile-development, apis
- platform: cpp
- tags: oauth2, openid-connect, pkce, objective-c, tvos, native-apps, ios, macos, swift

## Member repositories
- openid/AppAuth-iOS (main) score 91

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:06.644052+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:59:49.713163+00:00, confidence not recorded.
  - readme: https://github.com/openid/AppAuth-iOS (fetched 2026-08-28T04:06:06.644052+00:00, sha e98ad5f71c6e)
  - homepage: https://openid.github.io/AppAuth-iOS (fetched 2026-08-29T10:39:54.174193+00:00, sha 14781d735d79)
- Data as of 2026-08-30T08:39:29.467469+00:00.