I’m attempting to implement oauth authentication in a react native expo managed application.
I’m relatively inexperienced with Oauth, though I think I have a decent high-level understanding of how it works.
The problem I’ve run into is that the redirect URI must be in the https or http schema, and deep linking is not supported. So I’m not sure how to redirect users to my application after they’ve allowed the app access to their data.
I’ve searched SO, reddit, and this forum, but didn’t find anything (although, I’d be surprised if no one has encountered this).
OAuth is a complex thing and I am still wrapping my head around it. That being said, and because I struggled many times, I am confident to say that at the moment you will not be able to implement Asana OAuth without a webserver. It used to work, my apps were using OAuth on the client-side only, and they changed the way it worked a few months ago. I had to code a backend auth…
@Phil_Seeman do you concur?
1 Like
I wasn’t aware it was previously possible to do it client-side only, but I’m no OAuth expert, either. I would say yes, you’d need a server to handle your side of the OAuth handshake process.
I was surprised as well, it was kind of a hack I think 
@Trevor_Rydalch I am using Firebase for the backend, really easy to set up especially with mobile.
1 Like
Maybe I’ll have to look into that.
So would the server just perform the handshake and the redirect to the native deep link in the app?
The server generates the auth token from the access_token and will have to share it with the app so it can make the calls