options: { expirationDuration?: undefined | number }

• Optional expirationDuration?: undefined | number

  The expiration duration for registered claim key in seconds. The value of which must not be greater than 15777000 (6 months in seconds) from the Current Unix Time on the server.

  link

  https://developer.apple.com/documentation/sign_in_with_apple/generate_and_validate_tokens#3262048

  default

  15777000

kid: string

clientSecret: string

code: string

options: { redirectUri?: undefined | string }

• Optional redirectUri?: undefined | string

  The destination URI the code was originally sent to.

options: { nonce?: undefined | string; redirectUri: string; scope?: undefined | ("name" | "email")[]; state?: undefined | string }

• Optional nonce?: undefined | string

  A String value used to associate a client session with an ID token. This value is also used to mitigate replay attacks.

• redirectUri: string

  The destination URI the code was originally sent to.

• Optional scope?: undefined | ("name" | "email")[]

  The amount of user information requested from Apple.

  You can request the user’s "name" or "email". You can also choose to request both, or neither. Ommiting the property or providing any empty won't request any scopes.

  example

  ['email']

  example

  ['name', 'email']

• Optional state?: undefined | string

  A unique and non-guessable value that helps prevent CSRF attacks. Usually a UUID string.

  link

  https://auth0.com/docs/protocols/oauth2/oauth-state

clientSecret: string

refreshToken: string

idToken: string

options: { ignoreExpiration?: undefined | boolean; nonce?: undefined | string; subject?: undefined | string }

• Optional ignoreExpiration?: undefined | boolean

  If you want to handle expiration on your own or decode expired tokens you can set to ignore expiration

  default

  false

• Optional nonce?: undefined | string

  The nonce parameter value needs to include per-session state and be unguessable to attackers.

• Optional subject?: undefined | string

  If you want to check subject (sub) a.k.a "user_identifier"