nov / apple_id

Sign in with Apple backend library in Ruby
https://rubygems.org/gems/apple_id
MIT License
198 stars 23 forks source link

Identity token verification #16

Closed armandsLa closed 2 years ago

armandsLa commented 2 years ago

Identity token verification should be possible without providing client instance. The client requires OAuth service credentials that are unnecessary when already acquired identity token needs to be verified.

Looks like the client is necessary only to verify the aud value. This value could be passed as an argument.

nov commented 2 years ago

I think you can pass client_id like AppleID::IdToken#verify!(client: client_id)