FireForNet.Firebase.Auth.Apple 1.0.1-preview.22

FireForNet.Firebase.Auth.Apple

Apple-native platform integration for FireForNet Firebase Authentication (iOS, macOS, Mac Catalyst).

About FireForNet

FireForNet is a platform-agnostic, .NET-native Firebase Client SDK developed as part of the Circuids ecosystem. It provides a consistent Firebase client development experience across .NET application environments, while allowing platform-specific implementations where Firebase requires them.

About This Package

This package provides Apple-specific Firebase Authentication functionality for FireForNet. It multi-targets net10.0-ios, net10.0-macos, and net10.0-maccatalyst with no MAUI dependency.

It provides:

• Token storage — KeychainTokenStorage stores auth tokens as a generic password item encrypted at rest by the OS keychain (SecKeyChain with SecRecord / SecKind.GenericPassword), accessible after the first device unlock (SecAccessible.AfterFirstUnlock).
• Web authentication — AppleWebAuthProvider uses ASWebAuthenticationSession to open the Firebase __/auth/handler OAuth URL in the system browser. SupportsPopup is false; SupportsRedirect is true.

If Keychain access is unavailable, set EnableTokenStorage = false and provide a custom ITokenStorage implementation. The library does not fall back automatically — Keychain is the correct Apple platform storage, and silent fallback to a weaker mechanism would be a security concern.

Installation

dotnet add package FireForNet.Firebase.Auth.Apple

Usage

services.AddFirebase(new FirebaseOptions
{
    ApiKey = "your-api-key",
    ProjectId = "your-project"
})
.AddFirebaseAuth()
.UseApple(options =>
{
    options.EnableTokenStorage = true;
    options.EnableWebAuthProvider = true;
});

MAUI apps on Apple platforms should normally call UseMaui() from FireForNet.Firebase.Auth.Maui, which delegates to this package on the Apple TFMs.

Consumer setup

Keychain entitlements

• iOS / Mac Catalyst (sandboxed): the app must have a keychain-access-groups entitlement in Entitlements.plist; without it, Keychain operations fail with SecStatusCode.MissingEntitlement (-34018). Add the app's bundle ID as the first entry.
• macOS (unsandboxed): Keychain access uses the user's login keychain; first use may prompt the user. No entitlement is required. Sandboxed macOS apps require the same keychain-access-groups entitlement as above.

Callback scheme registration

The redirect URI uses a custom URL scheme (firefornet-{projectId}://auth). Register this scheme in the app's Info.plist so the OS can route the callback back to the app (CFBundleURLTypes → CFBundleURLSchemes).

macOS presentation context

On net10.0-macos, ASWebAuthenticationSession requires a presentation anchor (window). If the app has no main window (e.g., a menu bar or console app), set EnableWebAuthProvider = false and implement a custom IWebAuthProvider. This only affects net10.0-macos — iOS and Mac Catalyst handle presentation automatically via UIKit.

Minimum OS versions

Platform / Framework Support

Documentation

Comprehensive FireForNet documentation is being prepared for the Release Candidate stage.

Project Status

FireForNet is currently available as a Preview release and is approaching its Release Candidate milestone. APIs, package structure, and implementation details may continue to evolve before RC and GA.

The RC milestone will be followed by an extensive cross-platform validation and testing phase before the first GA release.

All FireForNet packages are part of a coordinated release train and share the same version number.

Source Availability

FireForNet is currently being developed in a private source repository during the Preview development phase. The source will be made publicly available as the project approaches its open-source phase, with the public repository established from the appropriate release milestone.

Until then, NuGet Preview packages provide the public distribution channel for evaluating and using FireForNet.

License

This package is licensed under the Apache-2.0 license.