AuthenticationServices macOS xcode27.0 b1

#AuthenticationServices.framework

diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASAuthorizationProviderExtensionLoginConfiguration.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASAuthorizationProviderExtensionLoginConfiguration.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASAuthorizationProviderExtensionLoginConfiguration.h	2026-04-23 01:59:59
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASAuthorizationProviderExtensionLoginConfiguration.h	2026-05-30 23:22:35
@@ -54,6 +54,8 @@
     ASAuthorizationProviderExtensionFederationTypeNone = 0,
     ASAuthorizationProviderExtensionFederationTypeWSTrust = 1,
     ASAuthorizationProviderExtensionFederationTypeDynamicWSTrust = 2,
+    ASAuthorizationProviderExtensionFederationTypeOpenID API_AVAILABLE(macos(27.0)) API_UNAVAILABLE(ios, watchos, tvos) = 3,
+    ASAuthorizationProviderExtensionFederationTypeDynamicOpenID API_AVAILABLE(macos(27.0)) API_UNAVAILABLE(ios, watchos, tvos) = 4,
 }  NS_SWIFT_NAME(ASAuthorizationProviderExtensionLoginConfiguration.FederationType);
 
 
@@ -335,7 +337,13 @@
  */
 @property (nonatomic) ASAuthorizationProviderExtensionFederationType federationType API_AVAILABLE(macos(13.3)) API_UNAVAILABLE(ios, watchos, tvos);
 
+
 /*!
+ @abstract The federation method to use for fallback.
+ */
+@property (nonatomic) ASAuthorizationProviderExtensionFederationType fallbackFederationType API_AVAILABLE(macos(27.0)) API_UNAVAILABLE(ios, watchos, tvos);
+
+/*!
  @abstract The URN to request when performing a federated login.
  */
 @property (nonatomic, nullable, copy) NSString *federationRequestURN API_AVAILABLE(macos(13.3)) API_UNAVAILABLE(ios, watchos, tvos);
@@ -364,6 +372,18 @@
  @abstract The custom query string values to add when making the preauthenticaion request.
  */
 @property (nonatomic, copy) NSArray<NSURLQueryItem *> *customFederationUserPreauthenticationRequestValues API_AVAILABLE(macos(13.3)) API_UNAVAILABLE(ios, watchos, tvos);
+
+
+/*!
+ @abstract The OpenID authorization request URL.  This can be overwritten when using dynamic federation.
+ */
+@property (nonatomic, copy) NSURL *authorizationURL API_AVAILABLE(macos(27.0)) API_UNAVAILABLE(ios, watchos, tvos);
+
+/*!
+ @abstract The claim in the preauthentication response that contains the OpenID authorization URL.
+ */
+@property (nonatomic, copy) NSString *authorizationURLKeypath API_AVAILABLE(macos(27.0)) API_UNAVAILABLE(ios, watchos, tvos);
+
 
 
 // MARK: - Request Encryption
diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASAuthorizationProviderExtensionRegistrationHandler.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASAuthorizationProviderExtensionRegistrationHandler.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASAuthorizationProviderExtensionRegistrationHandler.h	2026-04-23 01:59:59
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASAuthorizationProviderExtensionRegistrationHandler.h	2026-05-30 23:22:35
@@ -17,6 +17,7 @@
     ASAuthorizationProviderExtensionAuthenticationMethodPassword = 1,
     ASAuthorizationProviderExtensionAuthenticationMethodUserSecureEnclaveKey = 2,
     ASAuthorizationProviderExtensionAuthenticationMethodSmartCard API_AVAILABLE(macos(14.0)) API_UNAVAILABLE(ios, watchos, tvos) = 3,
+    ASAuthorizationProviderExtensionAuthenticationMethodOpenID API_AVAILABLE(macos(27.0)) API_UNAVAILABLE(ios, watchos, tvos) = 5,
 } API_AVAILABLE(macos(13.0)) API_UNAVAILABLE(ios, watchos, tvos);
 
 API_AVAILABLE(macos(13.0)) API_UNAVAILABLE(ios, watchos, tvos)
@@ -63,6 +64,8 @@
     ASAuthorizationProviderExtensionSupportedGrantTypesSAML1_1 NS_SWIFT_NAME(saml1_1) = 1 << 2 ,
     // SAML 2.0
     ASAuthorizationProviderExtensionSupportedGrantTypesSAML2_0 NS_SWIFT_NAME(saml2_0) = 1 << 3,
+    // Token Exchange
+    ASAuthorizationProviderExtensionSupportedGrantTypesTokenExchange API_AVAILABLE(macos(27.0)) API_UNAVAILABLE(ios, watchos, tvos) = 1 << 4,
 } API_AVAILABLE(macos(14.0)) API_UNAVAILABLE(ios, watchos, tvos);
 
 typedef NS_ENUM(NSInteger, ASAuthorizationProviderExtensionPlatformSSOProtocolVersion) {
diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialProviderExtensionContext.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialProviderExtensionContext.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialProviderExtensionContext.h	2026-04-23 01:59:59
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialProviderExtensionContext.h	2026-05-30 23:32:28
@@ -52,7 +52,7 @@
  */
 - (void)completeRegistrationRequestWithSelectedPasskeyCredential:(ASPasskeyRegistrationCredential *)credential completionHandler:(void(^ _Nullable)(BOOL expired))completionHandler API_AVAILABLE(ios(17.0), macos(14.0)) NS_SWIFT_NAME(completeRegistrationRequest(using:completionHandler:)) API_UNAVAILABLE(watchos, tvos);
 
-/*! @abstract Complete the request by providing the user selected one time code credential.
+/*! @abstract Complete the request by providing the user selected one-time code credential.
  @param credential the credential that the user has selected.
  @param completionHandler optionally contains any work which the extension may need to perform after the request has been completed,
  as a background-priority task. The `expired` parameter will be YES if the system decides to prematurely terminate a previous
diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialProviderViewController.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialProviderViewController.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialProviderViewController.h	2026-04-23 01:22:28
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialProviderViewController.h	2026-05-30 23:22:35
@@ -16,8 +16,8 @@
 #import <AuthenticationServices/ASCredentialRequest.h>
 #import <AuthenticationServices/ASPasskeyCredentialRequestParameters.h>
 
-#import <AuthenticationServices/ASSavePasswordRequest.h>
 #import <AuthenticationServices/ASGeneratePasswordsRequest.h>
+#import <AuthenticationServices/ASSavePasswordRequest.h>
 
 NS_ASSUME_NONNULL_BEGIN
 
@@ -53,7 +53,7 @@
  */
 - (void)prepareCredentialListForServiceIdentifiers:(NSArray<ASCredentialServiceIdentifier *> *)serviceIdentifiers requestParameters:(ASPasskeyCredentialRequestParameters *)requestParameters API_AVAILABLE(ios(17.0), macos(14.0)) API_UNAVAILABLE(watchos, tvos);
 
-/*! @abstract Prepare the view controller to show a list of one time code credentials.
+/*! @abstract Prepare the view controller to show a list of one-time code credentials.
  @param serviceIdentifiers the array of service identifiers.
  @discussion This method is called by the system to prepare the extension's view controller to present the list of credentials.
  A service identifier array is passed which can be used to filter or prioritize the credentials that closely match each service.
@@ -92,7 +92,7 @@
 /// to enhance the user experience. If your extension can accomplish this (for example, the user’s passwords
 /// database is still unlocked from a recent interaction), call `-[ASCredentialProviderExtensionContext completeRequestWithSelectedCredential:completionHandler:]`
 /// for password credentials, `-[ASCredentialProviderExtensionContext completeAssertionRequestWithSelectedPasskeyCredential:completionHandler:]` for passkey credentials,
-/// or `-[ASCredentialProviderExtensionContext completeOneTimeCodeRequestWithSelectedCredential:completionHandler:]` for one time code credentials.
+/// or `-[ASCredentialProviderExtensionContext completeOneTimeCodeRequestWithSelectedCredential:completionHandler:]` for one-time code credentials.
 /// If an error occurs, call `-[ASCredentialProviderExtensionContext cancelRequestWithError:]`
 /// and pass an error with domain `ASExtensionErrorDomain` and an appropriate error code from
 /// `ASExtensionErrorCode`. For example, if your extension requires user interaction because the
@@ -110,7 +110,7 @@
 ///
 /// Similarly, your extension needs to specify a true value for the Information Property List key `ProvidesOneTimeCodes`
 /// under the `ASCredentialProviderExtensionCapabilities` dictionary in order to be presented in
-/// the list of options for one time code requests.
+/// the list of options for one-time code requests.
 ///
 /// - Note: When this method is called, your extension's view controller is not present on the screen. Do not
 ///   attempt or expect to show any user interface in this method.
diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialRequest.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialRequest.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialRequest.h	2026-04-23 01:59:59
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASCredentialRequest.h	2026-05-30 23:22:36
@@ -15,7 +15,7 @@
  @constant ASCredentialRequestTypePassword Password credential type.
  @constant ASCredentialRequestTypePasskeyAssertion Passkey assertion credential type.
  @constant ASCredentialRequestTypePasskeyRegistration Passkey registration credential type.
- @constant ASCredentialRequestTypeOneTimeCode One Time Code credential type.
+ @constant ASCredentialRequestTypeOneTimeCode One-Time Code credential type.
  */
 typedef NS_ENUM(NSInteger, ASCredentialRequestType) {
     ASCredentialRequestTypePassword = 0,
diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASOneTimeCodeCredential.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASOneTimeCodeCredential.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASOneTimeCodeCredential.h	2026-04-23 01:59:59
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASOneTimeCodeCredential.h	2026-05-30 23:22:35
@@ -11,18 +11,19 @@
 
 NS_ASSUME_NONNULL_BEGIN
 
+AS_SWIFT_SENDABLE
 AS_EXTERN API_AVAILABLE(ios(18.0), macos(15.0), visionos(2.0)) API_UNAVAILABLE(tvos, watchos)
 @interface ASOneTimeCodeCredential : NSObject <ASAuthorizationCredential>
 
 - (instancetype)init NS_UNAVAILABLE;
 
 /*! @abstract Creates and initializes a new ASOneTimeCodeCredential object.
- @param code the one time code.
+ @param code the one-time code.
  */
 + (instancetype)credentialWithCode:(NSString *)code;
 
 /*! @abstract Initializes an ASOneTimeCodeCredential object.
- @param code the one time code.
+ @param code the one-time code.
  */
 - (instancetype)initWithCode:(NSString *)code NS_DESIGNATED_INITIALIZER;
 
diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASOneTimeCodeCredentialIdentity.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASOneTimeCodeCredentialIdentity.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASOneTimeCodeCredentialIdentity.h	2026-04-23 02:00:01
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASOneTimeCodeCredentialIdentity.h	2026-05-30 23:22:37
@@ -14,7 +14,7 @@
 @class ASCredentialServiceIdentifier;
 
 /*! @class ASOneTimeCodeCredentialIdentity
- An ASOneTimeCodeCredentialIdentity is used to describe an identity that can use a service upon successful one time code based authentication.
+ An ASOneTimeCodeCredentialIdentity is used to describe an identity that can use a service upon successful one-time code based authentication.
  Use this class to save entries into ASCredentialIdentityStore.
  */
 AS_EXTERN API_AVAILABLE(ios(18.0), macos(15.0), visionos(2.0)) API_UNAVAILABLE(tvos, watchos)
@@ -25,13 +25,13 @@
 
 /*! @abstract Initializes an instance of ASOneTimeCodeCredentialIdentity.
  @param serviceIdentifier The service identifier for which this credential identity is valid.
- @param label A user-provided label to identify the one time code.
+ @param label A user-provided label to identify the one-time code.
  @param recordIdentifier An optional string to uniquely identify this record in your local database.
  */
 - (instancetype)initWithServiceIdentifier:(ASCredentialServiceIdentifier *)serviceIdentifier label:(NSString *)label recordIdentifier:(nullable NSString *)recordIdentifier;
 
-/*! @abstract A label to identify the one time code, typically supplied by the user.
- This string will be shown in the AutoFill suggestion for this one time code credential.
+/*! @abstract A label to identify the one-time code, typically supplied by the user.
+ This string will be shown in the AutoFill suggestion for this one-time code credential.
  */
 @property (nonatomic, readonly, copy) NSString *label;
 
diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASSavePasswordRequest.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASSavePasswordRequest.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASSavePasswordRequest.h	2026-04-23 01:59:58
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/ASSavePasswordRequest.h	2026-05-30 23:22:35
@@ -8,7 +8,6 @@
 
 #import <AuthenticationServices/ASCredentialServiceIdentifier.h>
 #import <AuthenticationServices/ASPasswordCredential.h>
-
 #import <AuthenticationServices/ASGeneratedPasswordKind.h>
 
 AS_HEADER_AUDIT_BEGIN(nullability, sendability)
diff -ruN /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/AuthenticationServices.h /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/AuthenticationServices.h
--- /Applications/Xcode_26.5.0.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/AuthenticationServices.h	2026-04-23 01:59:57
+++ /Applications/Xcode_27.0.0-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/Frameworks/AuthenticationServices.framework/Headers/AuthenticationServices.h	2026-05-30 23:22:33
@@ -118,8 +118,8 @@
 #import <AuthenticationServices/ASAuthorizationPublicKeyCredentialPRFRegistrationInput.h>
 #import <AuthenticationServices/ASAuthorizationPublicKeyCredentialPRFRegistrationOutput.h>
 
-#import <AuthenticationServices/ASSavePasswordRequest.h>
 #import <AuthenticationServices/ASGeneratePasswordsRequest.h>
 #import <AuthenticationServices/ASGeneratedPassword.h>
 #import <AuthenticationServices/ASGeneratedPasswordKind.h>
+#import <AuthenticationServices/ASSavePasswordRequest.h>