Exchange a native Apple credential
Exchange a Sign in with Apple identity token issued to the native iOS app for a Guile authentication session. The server verifies Apple’s signature, issuer, audience, and expiry before resolving the verified Apple identity to its Guile user. Each identity token can be exchanged only once.
An invalid, expired, or incomplete Apple credential returns 401 without issuing a session. Reusing a previously exchanged credential returns 409 without issuing another session.
Body
The native Sign in with Apple credential to exchange for a Guile session.
The signed Apple identity token returned by AuthenticationServices.
1 - 16384Apple's first-authorization user JSON, when AuthenticationServices supplies it.
4096The raw nonce the client gave Apple for this sign-in, sent so the token can be bound to this attempt. Required whenever the identity token carries a nonce claim.
16 - 256Response
Ok. The operation succeeded.
The JSON representation of issued authentication tokens as the result of a successful authentication challenge or the exchange of a refresh token.