https://github.com/curityio/ios-haapi-ui-sdk-demo
An OpenID Connect iOS demo app showing how to use the HAAPI UI SDK and hardened mobile security
https://github.com/curityio/ios-haapi-ui-sdk-demo
code-example haapi ios mobile oauth2 openid-connect
Last synced: 25 days ago
JSON representation
An OpenID Connect iOS demo app showing how to use the HAAPI UI SDK and hardened mobile security
- Host: GitHub
- URL: https://github.com/curityio/ios-haapi-ui-sdk-demo
- Owner: curityio
- License: apache-2.0
- Created: 2023-07-11T10:30:09.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2026-01-29T17:43:25.000Z (6 months ago)
- Last Synced: 2026-01-30T05:28:55.998Z (6 months ago)
- Topics: code-example, haapi, ios, mobile, oauth2, openid-connect
- Language: Swift
- Homepage: https://curity.io/resources/learn/swift-ios-haapi/
- Size: 9.37 MB
- Stars: 0
- Watchers: 5
- Forks: 1
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# iOS Application using the HAAPI UI SDK
[](https://curity.io/resources/code-examples/status/)
[](https://curity.io/resources/code-examples/status/)
An example iOS app that uses the Curity Identity Server's Hypermedia API to perform an OIDC flow.\
Authentication uses native screens without the need for an external browser.
## Getting Started
Start with a local automated deployment to ensure that you understand the technical setup.\
You can then apply the same configuration to deployed environments.
### 1. Deploy the the Curity Identity Server
Ensure that the local computer has these prerequisites:
- A Docker engine.
- The `envsubst` tool, e.g with `brew install gettext`.
- The `jq` tool, e.g with `brew install jq`.
First copy a `license.json` file for the Curity Identity Server into the root folder.\
Then run a Docker deployment and indicate how connected simulators or devices call the Curity Identity Server.
For example, run the following commands to connect to a macOS computer using its IP address.\
Or you can set the `IDSVR_HOST_NAME` to `localhost` if you only want to test on simulators.
```bash
export USE_NGROK='false'
export IDSVR_HOST_NAME="$(ipconfig getifaddr en0)"
./start-idsvr.sh
```
### 2. View Security Configuration
The [Mobile Deployments](https://github.com/curityio/mobile-deployments) repository explains further information about the deployed backend infrastructure.\
You can view the [HAAPI Configuration](config/docker-template.xml) to understand the settings to apply to deployed environments.
### 3. Test Basic Logins
Run the app and first test basic logins using an HTML Form authenticator.\
Sign in to the deployed environment and use a pre-shipped test user account.
- Username: `demouser`
- Password: `Password1`
### 4. Test Native Passkey Logins
Passkeys require hosting of assets documents at a trusted internet HTTPS URL.\
You must also provide overrides with your own Apple team ID and unique bundle identifier.
You can use ngrok to host assets documents to enable the testing of passkeys logins.\
The following example commands deploy the Curity Identity Server with a passkeys configuration.\
See the tutorial link at the end of this README to learn more about the ngrok tool.
```bash
export APPLE_TEAM_ID='MYTEAMID'
export APPLE_BUNDLE_ID='io.myorganization.haapidemo'
export USE_NGROK='true'
./start-idsvr.sh
```
In Xcode, configure the team ID and bundle ID under `Signing & Capabilities`.\
Also ensure that Apple development tools sign the app, such as with the `Automatically manage signing` option.
### 5. Free Deployment Resources
Once you have finished local testing, free all backend resources with the following command:
```bash
./stop-idsvr.sh
```
## Application Code
The following links point you to the most essential areas of the example app's source code.
### Main Source Files
This app only authenticates the user, then displays the tokens obtained from the authorization server.\
See the following source files to understand how that works:
- The [Configuration](src/Configuration.swift) object contains all of the OpenID Connect settings.
- The [DemoAppDelegate](src/DemoAppDelegate.swift) shows how to create a global object to complete the configuration.
- The [UnauthenticatedView](src/Views/UnauthenticatedView.swift) shows the code needed to manage logins using the HAAPI UI SDK.
- The [AuthenticatedView](src/Views/AuthenticatedView.swift) shows how to use tokens to call APIs once authentication completes.
### Customizing the Look and Feel
The [HAAPI iOS customization tutorial](https://curity.io/resources/learn/haapi-mobile-ios-customization) explains how to change the default theme.\
See also the [Developer Documentation](https://curity.io/docs/haapi-ios-ui-kit/latest/) for the finer details of customization options.
## Resources
See the following tutorials for additional developer information:
- The [Swift iOS App using HAAPI](https://curity.io/resources/learn/swift-ios-haapi/) tutorial provides an overview of the code example's behaviors.
- The [ngrok tutorials](https://curity.io/resources/learn/mobile-setup-ngrok/) explain how to use an internet URL and [view HAAPI messages](https://curity.io/resources/learn/expose-local-curity-ngrok/#ngrok-inspection-and-status).
- The [Configure Native Passkeys for Mobile Logins](https://curity.io/resources/learn/mobile-logins-using-native-passkeys/) tutorial explains the technical setup when using passkeys.
- The [HAAPI Mobile Guides](https://curity.io/resources/haapi-ui-sdk/) provide further details for HAAPI mobile developers.
## Further information
Please visit [curity.io](https://curity.io/) for more information about the Curity Identity Server.