
Replace "" with your real app ID from Apple. It reads the token from stdin, and try to validate the token. If you use javascript, the following is an example of how to validate the token. These libraries can help you parse and validate the token. There are JWT libraries available in most programming languages. The time in epoch at which the authentication happened. It's only used when you need to validate the authorization email address of the user. The expiration time in epoch (seconds since 00:00:00Z) of the token. Your server-side needs to validate the token to make sure it is intended to your app.
The token you get back from Sign in with Apple uses your iOS app ID as the audience.Check the audience of the JWT token is for your app.
Make sure the exp claims must be after the current time. Validate that the token is not expired. Validate that the token's signature is valid. Validate that token is in a valid format. To validate that JWT token is issued by Apple and intended to be used by your app, you must verify: With that in mind, we also want to take this opportunity to share plans for our upcoming User Authentication solution, available later this year.įor games or applications which also require server-side identity validation, you can pass the identityToken to a server for validation.Īpple's identityToken is a JSON Web Token ( JWT) token which the client-side cannot generate. Whether you maintain an in-house system or rely on third-party login services, we want to help make the player experience more seamless while providing flexibility for game developers. Player identity is a core part of many mobile games and is increasingly important in the context of player privacy. For more advanced use cases, an overview of how you can perform server-side validation. A step by step guide of how to use the new asset store plugin. You can add the package to new or existing projects to leverage the new Sign in with Apple feature easily. To make complying with these new guidelines easier, we have created a new asset store package. We know many Unity developers depend on third-party sign-in services. You can read more about this change on Apple's developer site. Existing applications will be required to comply by April 2020. With the imminent release of iOS 13 on September 19, Apple has updated the App Store Review Guidelines and they now require any new applications that use third-party or social login services to offer Sign in with Apple as an equivalent option. At Worldwide Developers Conference (WWDC) in June, Apple announced a new product: Sign in with Apple.