SNS 로그인(애플) #2

Redirect URI 서버

 

1. Client Secret 발급(client_secret.rb)

require 'jwt'

key_file = 'key'
team_id = 'TODO'
client_id = 'TODO'
key_id = 'TODO'

ecdsa_key = OpenSSL::PKey::EC.new IO.read key_file

headers = {
  'kid' => key_id
}

claims = {
    'iss' => team_id,
    'iat' => Time.now.to_i,
    'exp' => Time.now.to_i + 86400*180,
    'aud' => 'https://appleid.apple.com',
    'sub' => client_id,
}

token = JWT.encode claims, ecdsa_key, 'ES256', headers

puts token

ruby client_secret.rb

 

 

2. Redirect URI 서버 페이지 개발

redirect uri 페이지 생성하면 authorization code 를 전달 받음

 

authorization 검증 코드 해당 페이지 참조

https://developer.apple.com/documentation/sign_in_with_apple/generate_and_validate_tokens

Apple Developer Documentation

URL

POST https://appleid.apple.com/auth/token

ContentType

application / x-www-form-urlencoded

Request Body (FormData)

client_id

client_secret

code

grant_type

refresh_token

redirect_uri

Response

{
  "access_token": "beg510...67Or9",
  "token_type": "Bearer",
  "expires_in": 3600,
  "id_token": "eyJra...96sZg"
}

id_token Base64 Decode