## The problem
Issue nhost/nhost#2554 (closed, 22 comments): When working with apps (Flutter or native), we often use native authentication methods with Google and Apple. Those methods return an idToken and an accessToken. Authentication providers such as Firebase Authentication allow us to send those tokens as an OAuth response, thus authenticating a user. Nhost only allows OAuth web authentication, which is not suitable for native apps, especially with Apple.
## The fix
Nhost added a native sign-in endpoint for mobile apps, so web OAuth is no longer required for Google/Apple sign-in. Call POST /signin/idtoken with: provider (apple or google, required), idtoken (required), nonce (optional, unhashed; recommended if your idToken includes one, to guard against replay attacks), plus the same options object used by other sign-up methods. React Native SDK and example app support is in nhost/nhost#3000.
## Notes
Thread: https://github.com/nhost/nhost/issues/2554. Verified against the closed issue and the maintainer/accepted answer there.