Profile is empty in Nestjs

[sujayroro]

Profile parameter returns empty object on validate function Nestjs.

[ananay]

Hello, this seems to be working for me.

• Please check out the example at https://passport-apple.ananay.dev.
• The example repository is at https://github.com/ananay/passport-apple-example

Please note that the profile info (a.k.a the First and Last Name) are shown only the FIRST time you sign in to the app. The next time you sign in, Apple will not provide you with this information.

You can revoke the app by going into Sign in with Apple section on appleid.apple.com

[utshomax]

Same issue here with express. returns empty object.

[zenstok]

It will always return empty object for profile, because this package actually never sets the profile attribute. @ananay if you want to implement it, you will need to override this method https://github.com/jaredhanson/passport-oauth2/blob/master/lib/strategy.js#L318, but from what i've seen, Apple is not using access token, so I don't think it's possible now.

You can use my template below which should work with @nestjs/passport 10.0.2.

@Injectable()
export class AppleStrategy extends PassportStrategy(Strategy, 'apple', 6) {
  constructor(
    configService: ConfigService,
    configHelperService: ConfigHelperService,
  ) {
    super({
      clientID: configService.get('APPLE_CLIENT_ID'),
      teamID: configService.get('APPLE_TEAM_ID'),
      keyID: configService.get('APPLE_KEY_ID'),
      privateKeyLocation: configService.get('APPLE_APPLICATION_CREDENTIALS'),
      callbackURL: configHelperService.getAppleCallbackUrl(),
      passReqToCallback: true,
    });
  }

  async validate(
    req: any,
    accessToken: string,
    refreshToken: string,
    idToken: string,
    profile: any,
    done: VerifyCallback,
  ): Promise<any> {
    console.log('apple profile', req.appleProfile); // this will be available only on first request, subsequent requests will give you undefined
    console.log('accessToken', accessToken);
    console.log('refreshToken', refreshToken);
    console.log('idToken', idToken); // from this you can retrieve the user id and email (email can be hidden)
    console.log('profile', profile); // this will always be an empty object
    console.log('done', done);

    // for security reasons, you should also check if the token is valid, check iss, aud, exp, etc.

    done(null, {});
  }
}

[BijanRegmi]

It will always return empty object for profile, because this package actually never sets the profile attribute. @ananay if you want to implement it, you will need to override this method https://github.com/jaredhanson/passport-oauth2/blob/master/lib/strategy.js#L318, but from what i've seen, Apple is not using access token, so I don't think it's possible now.

You can use my template below which should work with @nestjs/passport 10.0.2.

@Injectable()
export class AppleStrategy extends PassportStrategy(Strategy, 'apple', 6) {
  constructor(
    configService: ConfigService,
    configHelperService: ConfigHelperService,
  ) {
    super({
      clientID: configService.get('APPLE_CLIENT_ID'),
      teamID: configService.get('APPLE_TEAM_ID'),
      keyID: configService.get('APPLE_KEY_ID'),
      privateKeyLocation: configService.get('APPLE_APPLICATION_CREDENTIALS'),
      callbackURL: configHelperService.getAppleCallbackUrl(),
      passReqToCallback: true,
    });
  }

  async validate(
    req: any,
    accessToken: string,
    refreshToken: string,
    idToken: string,
    profile: any,
    done: VerifyCallback,
  ): Promise<any> {
    console.log('apple profile', req.appleProfile); // this will be available only on first request, subsequent requests will give you undefined
    console.log('accessToken', accessToken);
    console.log('refreshToken', refreshToken);
    console.log('idToken', idToken); // from this you can retrieve the user id and email (email can be hidden)
    console.log('profile', profile); // this will always be an empty object
    console.log('done', done);

    // for security reasons, you should also check if the token is valid, check iss, aud, exp, etc.

    done(null, {});
  }
}

even with this implementation i am receiving empty idToken {}

[VinzSpring]

My idToken is an empty object aswell!