Skip to main content

notification

open_chess_server::http::apple

Function notification 

Source 
pub async fn notification(
    __arg0: State<Ctx>,
    body: Bytes,
) -> ApiResult<Response>
Expand description

POST /auth/apple/notifications: Apple’s server-to-server notifications ({"payload": "<JWT>"}), the URL registered for Sign in with Apple. Checked as Apple’s, then:

  • consent-revoked (the person stopped using their Apple ID here): the link goes, and the tokens it signed in; an account with no other way in is signed out everywhere.
  • account-delete (their Apple Account is gone for good): the same, and an account with no other way in is closed, as DELETE /api/account does, since no one can sign in to it again.
  • email-disabled, email-enabled: noted only.

Answers 200 to anything it has handled or doesn’t know, so Apple doesn’t retry; 400 to what isn’t Apple’s.