Crate siwa[−][src]

Backend for Sign In With Apple

Provides verification of identityToken from Apple’s docs at: https://developer.apple.com/documentation/signinwithapplerestapi/verifying_a_user

To verify the identity token, your app server must:

  1. Fetch Apple’s public key to verify the ID token signature.

    https://appleid.apple.com/auth/keys

  2. Verify the JWS E256 signature using the server’s public key

  3. Verify the nonce for the authentication

  4. Verify that the iss field contains https://appleid.apple.com

  5. Verify that the aud field is the developer’s client_id

  6. Verify that the time is earlier than the exp value of the token

Structs

Claims

Enums

ValidateError

Functions

validate