AuthenticationServices — Foundations Skill

Purpose

Route Sign in with Apple implementation tasks to the minimum required AuthenticationServices Knowledge Contracts. v1 scope is the ASAuthorizationAppleIDProvider/ASAuthorizationController Sign in with Apple flow only — no Password AutoFill/credential-provider extensions, no Passkeys/WebAuthn APIs, no server-side identity-token verification.

Routing

Load only the contracts relevant to the task. All paths relative to knowledge/authenticationservices/.

• Building an ASAuthorizationAppleIDRequest via createRequest(), setting requestedScopes, driving ASAuthorizationController through its delegate/presentation-context protocols, or reading user/fullName/email/identityToken/authorizationCode/ASAuthorizationError from the result -> sign-in-with-apple-request-and-credential.md
• Generating/hashing a nonce, or forwarding identityToken/authorizationCode to a backend -> nonce-and-identity-token-verification.md
• Calling getCredentialState(forUserID:), branching on .authorized/.revoked/.notFound/.transferred, or observing credentialRevokedNotification -> credential-state-and-revocation.md
• Deciding what to persist for a signed-in session, or sign-out behavior -> session-persistence-and-sign-out.md