Passport-appleid NPM

passport-appleid

Passport strategy for authenticating with Apple ID using the OAuth 2.0 API.

This module lets you authenticate using Apple ID in your Node.js applications. By plugging into Passport, Apple authentication can be easily integrated into any Node.JS application or framework that supports Connect-style middleware, including Express.

Prerequisites

You should be enrolled in Apple Developer Program.
Please have a look at Apple documentation related to "Sign in with Apple" feature.
You should create App ID and Service ID in your Apple Developer Account.
You should generate private key for your Service ID in your Apple Developer Account.

More detail about configuration can be found in blog post and Apple docs.

Installation

Install the module using npm:

npm install --save passport-appleid

Usage

Configure Strategy

The Apple authentication strategy authenticates users using Apple ID and OAuth 2.0 tokens. The Apple Service ID, Apple Team ID, and private key can be obtained in Apple Developer Account. The strategy also requires a verify callback, which receives the access token and optional refresh token, as well as profile which contains the authenticated user's Apple profile. The verify callback must call done providing a user to complete authentication.

const AppleStrategy = require("passport-appleid");

passport.use(new AppleStrategy({
    clientID: APPLE_SERVICE_ID,
    callbackURL: 'https://www.example.net/auth/apple/callback',
    teamId: APPLE_TEAM_ID,
    keyIdentifier: 'RB1233456',
    privateKeyPath: path.join(__dirname, "./AuthKey_RB1233456.p8")
  }, 
  function(accessToken, refreshToken, profile, done) {
    const id = profile.id;
    User.findOrCreate(..., function (err, user) {
        done(err, user);
    });
  }
}));

Authenticate Requests

Use passport.authenticate(), specifying the 'apple' strategy, to authenticate requests.

For example, as route middleware in an Express application:

app.get('/auth/apple',
  passport.authenticate('apple'));

app.get('/auth/apple/callback',
  passport.authenticate('apple', { failureRedirect: '/login' }),
  function(req, res) {
    // Successful authentication, redirect home.
    res.redirect('/');
  });