Facebook Login on iOS: Using social login, to save time and effort by eliminating the need for backend authentication.

Introduction:

Adding Facebook Login to your iOS app can increase signup conversion rates. It allows users to log in using their existing Facebook accounts, saving time and effort. However, there are issues with the Facebook SDK, such as increased app size, privacy concerns, SDK bugs, and GDPR compliance.

How to Implement Facebook Login without the SDK:

1. Use Web APIs: Instead of the Facebook SDK, you can utilize Facebook's web APIs for login functionality.
2. Initiate an Authentication Session: Use ASWebAuthenticationSession, a secure web view, to authenticate users within your app.
3. Get Authentication Token: After the user logs in via the web view, extract the authentication token from the redirect URL.
4. Verify and Exchange Token: Send the token to your backend service for verification and exchange it for authorized request credentials.
5. Store and Handle Tokens: Store the received token securely using KeychainAccess and implement functions for storing, logging out, and checking token validity.

Benefits of avoiding the Facebook SDK:

• Reduced app size and improved performance.
• Enhanced user privacy without Facebook's data collection.
• Avoiding SDK bugs and issues.
• Ensuring GDPR compliance.

Conclusion:

Implementing Facebook Login without the Facebook SDK on iOS can provide a more streamlined and secure experience for users. By utilizing web APIs and handling authentication through secure web views, you can enhance user privacy, reduce app size, and avoid SDK-related complications. Storing and managing tokens securely ensures a smooth login process for your app's users.

Facebook security best practices:
https://developers.facebook.com/docs/facebook-login/security