Server-Side Sign in with Apple
Heads up... You’re accessing parts of this content for free, with some sections shown as text.
Heads up... You’re accessing parts of this content for free, with some sections shown as text.
Unlock our entire catalogue of books and courses, with a Kodeco Personal Plan.
Unlock now
The last piece of the puzzle is implementing the logic for completing the Sign in with Apple flow.
func appleAuthRedirectHandler(_ req: Request) async throws -> Response {
}
let data = try req.content.decode(SIWARedirectData.self)
guard let appIdentifier = Environment.get("WEBSITE_APPLICATION_IDENTIFIER") else {
throw Abort(.internalServerError)
}
let siwaToken = try await req.jwt.apple.verify(data.token, applicationIdentifier: appIdentifier)
let user: User
if let userFound = try await User.query(on: req.db).filter(\.$siwaIdentifier == siwaToken.subject.value).first() {
user = userFound
} else {
}
guard let email = data.email, let firstName = data.firstName, let lastName = data.lastName else {
throw Abort(.badRequest)
}
if let existingUser = try await User.query(on: req.db).filter(\.$username == email).first() {
} else {
}
user = existingUser
user.siwaIdentifier = siwaToken.subject.value
try await user.save(on: req.db)
let newUser = User(name: "\(firstName) \(lastName)", username: email, password: UUID().uuidString, siwaIdentifier: siwaToken.subject.value)
try await newUser.save(on: req.db)
user = newUser
req.auth.login(user)
return req.redirect(to: "/")
authSessionsRoutes.post("login", "siwa", "handle", use: appleAuthRedirectHandler)