Update Auth0 API requirements

main.js

@@ -6,6 +6,7 @@ import {
   View,
   Button,
   Linking,
+  AsyncStorage,
 } from 'react-native';
 import jwtDecoder from 'jwt-decode';
 
@@ -27,25 +28,28 @@ class App extends React.Component {
   state = {
     username: undefined,
   };
+
   componentDidMount() {
-    Linking.addEventListener('url', this._handleAuth0Redirect);
+    Linking.addEventListener('url', this._handleAuth0Redirect.bind(this));
   }
 
-  _loginWithAuth0 = async () => {
+  async _loginWithAuth0() {
     const redirectionURL = `${auth0Domain}/authorize` + this._toQueryString({
       client_id: auth0ClientId,
-      response_type: 'token',
+      response_type: 'id_token',
+      nonce: await this._getNonce(),
       scope: 'openid name',
       redirect_uri: redirectUri,
       state: redirectUri,
     });
     Expo.WebBrowser.openBrowserAsync(redirectionURL);
   }
 
-  _loginWithAuth0Twitter = async () => {
+  async _loginWithAuth0Twitter() {
     const redirectionURL = `${auth0Domain}/authorize` + this._toQueryString({
       client_id: auth0ClientId,
-      response_type: 'token',
+      response_type: 'id_token',
+      nonce: await this._getNonce(),
       scope: 'openid name',
       redirect_uri: redirectUri,
       connection: 'twitter',
@@ -54,8 +58,7 @@ class App extends React.Component {
     Expo.WebBrowser.openBrowserAsync(redirectionURL);
   }
 
-  _handleAuth0Redirect = async (event) => {
-    console.log('yo');
+  async _handleAuth0Redirect(event) {
     if (!event.url.includes('+/redirect')) {
       return;
     }
@@ -72,6 +75,26 @@ class App extends React.Component {
     this.setState({ username });
   }
 
+  /**
+   * Generate a cryptographically random nonce.
+   * @param {Number} length
+   */
+  _generateRandomString(length) {
+    const charset = '0123456789ABCDEFGHIJKLMNOPQRSTUVXYZabcdefghijklmnopqrstuvwxyz-._~';
+    return [...Array(length)]
+      .map(() => charset.charAt(Math.floor(Math.random() * charset.length)))
+      .join('');
+  }
+
+  async _getNonce() {
+    let nonce = await AsyncStorage.getItem('nonce');
+    if (!nonce) {
+      nonce = this._generateRandomString(16);
+      await AsyncStorage.setItem('nonce', nonce);
+    }
+    return nonce;
+  }
+
   /**
    * Converts an object to a query string.
    */