apple sso verify code

This block is part of the users group and was last modified in core v14.0.4.

Deprecated This block has been deprecated since v0.0.0, please avoid future use.

apple sso verify code value Deprecated v14.0.4

Exchange an Apple authorization code for user identity. Returns email, name, and a service token for "user exists by service". DEPRECATED from 15.0.1: this block takes the developer private key on a pin, so the .p8 key sits in the blueprint, in every export of it and in every simulation trace, and it reads the id_token without checking Apple's signature : safe only because the token came straight from Apple's token endpoint, and wrong for a token an app hands over. Configure a "Sign in with Apple" service provider instead and send the identity token to POST /auth/apple: the core verifies the signature, the audience and a one-time nonce, creates the account on first use and answers with a session.

In pins 7 + flow

flow
flow
Client ID required
value
Apple Services ID
Team ID required
value
Your Apple Developer Team ID
Key ID required
value
The Key ID from your Apple private key
Private Key required
value
The PEM private key from Apple Developer portal
Code required
value
The authorization code returned by Apple
Redirect URI required
value
Must be the same redirect URI used when generating the auth URL
User Data
value
The user JSON from Apple's form_post callback. Contains name data and is only sent on the user's first authorization.

Out pins 11 + flow

flow
flow
Email
value
The user email address from the SSO provider
Name
value
The user display name
First name
value
The user first name
Last name
value
The user last name
Service Token
value
Service token in format "{provider}-{id}" for use with "user exists by service" block
Provider User ID
value
The unique user ID at the SSO provider
Access Token
value
The OAuth access token for making API calls on behalf of the user
Refresh Token
value
The OAuth refresh token for obtaining new access tokens
Raw Token
object
The full decoded ID token claims from the provider
Success
condition
True if the code was exchanged successfully
Error
value
Error message if success is false

sso

oauth

apple

single sign on

openid

verify

exchange

callback

Version history

Introduced in v14.0.4.

Service documentation

External API reference This block wraps a third-party service. Click here for the service's own documentation of the underlying endpoint.

Back to users Return to the main group to view all sub-groups Back to sso Return to the group to view all blocks within this group