Hello, I am trying to manually link OIDC (google)...
# general
e
Hello, I am trying to manually link OIDC (google) Credential to my Account, but only through API (not using the Ory UI) . The bot tells me that:
Copy code
API Flows Limitation:
The documentation explicitly states that social sign-in (OIDC) linking is not currently supported for API clients (headless/native flows). The linking nodes for OIDC will only appear in browser-based flows, not in API/native flows. This is a known limitation and is tracked as a missing feature (kratos#273).
Is this still correct? What are the alternative here to link OIDC Credential to an account?
s
No, this feature exists for quite some time now: https://www.ory.sh/docs/kratos/social-signin/native-apps
Sorry, that's the wrong link. I'm actually not sure if all providers support this, but for Apple there is this specific section on how to submit an ID token: https://www.ory.sh/docs/kratos/social-signin/apple#using-the-apple-sdk-on-native-apps
Looking at the code, google and netid are also supported.
e
Thank you, I may misunderstand but it seems different though. While using Native SignIn to the OIDC is definitely a plus, this is not required and not the problem I am trying to solve. What I am trying to achieve is linking of Credential, but with my custom UI ( native mobile application, so I don not want to go to the Ory UI). The doc here explain only how to do it with UI. I understand I can achieve linking with updating the Profile, but the doc says:
Copy code
Danger
Social Sign In is not possible for API Clients. It will be possible in a future version, which is partially tracked as kratos#273
Looking at the ticket, it is marked as closed, so I am not sure about the current status for linking OIDC credential without the Ory UI.
s
OK I see, that is the same as what I send but for settings instead of registration. It seems like we only support this right now for the registration part, so currently it is not possible.
e
thanks Patrik
So to confirm, there is no way today, for a Mobile app, to link an OIDC Credential to its Identity?
s
it is, as part of registration/login
e
I am not sure I understand I am sorry
e
Ok I see
That won't work for me unfortunately, I can not count on the email being the same across OIDC
s
of course, makes sense