🐛 [firebase_auth] Calling Apple Revoke Token endpoint

[huangbolaw]

Bug report

Describe the bug
Calling revoke token endpoint has been resolved in the firebase-ios-sdk:
firebase/firebase-ios-sdk#9906 (comment)

A "feature" request was submitted:
#10827

Respectfully, and apologies to be blunt, this should be a top priority bug rather than a feature request for flutter firebase_auth, because without this, making an iOS app using flutter is infeasible. Not supporting iOS for almost a year is unacceptable. I find no rationale to view this as something that is "nice to have".
https://developer.apple.com/news/?id=12m75xbj

Steps to reproduce

Steps to reproduce the behavior:

1. Use firebase_auth to support signing in through AppleID
2. No way to call the revoke token end point within firebase_auth

Expected behavior

FirebaseAuth.instance.currentUser!.revokeAppleToken() returns true and disconnect the Apple ID from the firebase app.

[danagbemava-nc]

Hi @huangbolaw, a "feature" request was never filed on this repo. That was a discussion, which is entirely different from a feature request.

Thanks for drawing our attention to this feature.

cc @Lyokone

[huangbolaw]

For people out there, while waiting for this feature, consider using the sign_in_with_apple package (at https://pub.dev/packages/sign_in_with_apple), which works.

Firebase Function

See the following re implementation of a firebase function which, if provided with the authorizationCode, would (1) obtain a refresh token using the authorization code and (2) then revoke the refresh token:
https://github.com/jooyoungho/apple-token-revoke-in-firebase
Ref: firebase/firebase-ios-sdk#9906 (comment)

Client Side

Once you have the firebase function up and running, you can do the following on the app (client side) to obtain authorization code using sign_in_with_apple and then call the function:

final AuthorizationCredentialAppleID credential =
   await SignInWithApple.getAppleIDCredential(
      scopes: [
         AppleIDAuthorizationScopes.email,
         AppleIDAuthorizationScopes.fullName,
     ],
   );

Map<String, String> payload = {'token': credential.authorizationCode};
HttpsCallable revokeToken = FirebaseFunctions.instance.httpsCallable("revokeToken");

try {
   revokeToken.call(payload);
} catch (exception, stack) {
   // Deal with errors
}

[ChiaraMC]

Hey @danagbemava-nc is it possible to know if this issue is actively being worked on (and if so, if there's an estimate of when it might be fixed) or if it's been put in a backlog?

[darshankawar]

Added android label based on #11396 (comment)

[ChiaraMC]

Thanks for this @russellwheatley ! Really appreciated