Verify Apple identity token
To verify the identity token, your app server must
Verify the JWS E256 signature using the server’s public key
Verify the
nonce
for the authenticationVerify that the
iss
field containshttps://appleid.apple.com
Verify that the
aud
field is the developer’sclient_id
Verify that the time is earlier than the
exp
value of the token
Go :
Last updated