How to handle Sign in with Apple Server to server Notifications?

Hello.

When a user revokes Apple Login authorization, I am expecting a webhook to be delivered to our configured endpoint, but I currently not receiving any at all.

So I have some questions:

  • Should the revoke event webhook be delivered in real-time?
  • If it is not real-time, when is the webhook supposed to be sent?
  • If my server fails to respond to the webhook request, does Apple retry the delivery? (Actually I couldn't find how to response in this scenario, but if I can)

Thanks in advance.

Answered by DTS Engineer in 871776022

Hi @GHChoi,

You wrote:

Should the revoke event webhook be delivered in real-time?

Yes, the notification should be delivered to your endpoint in real-time.

Then, you wrote:

If my server fails to respond to the webhook request, does Apple retry the delivery?

The each event is expected to be delivered once, but duplicate notifications may occur due to repetitive events related to the user's account.

To learn more, please see the following documentation:

Processing changes for Sign in with Apple accounts

https://developer.apple.com/documentation/signinwithapple/processing-changes-for-sign-in-with-apple-accounts

Note: You may use the same URL for multiple developer teams and app, but each app must be configured with a notification endpoint to receive events for its users. Use the aud claim to map each event to the associated app or web service.

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Hi @GHChoi,

You wrote:

Should the revoke event webhook be delivered in real-time?

Yes, the notification should be delivered to your endpoint in real-time.

Then, you wrote:

If my server fails to respond to the webhook request, does Apple retry the delivery?

The each event is expected to be delivered once, but duplicate notifications may occur due to repetitive events related to the user's account.

To learn more, please see the following documentation:

Processing changes for Sign in with Apple accounts

https://developer.apple.com/documentation/signinwithapple/processing-changes-for-sign-in-with-apple-accounts

Note: You may use the same URL for multiple developer teams and app, but each app must be configured with a notification endpoint to receive events for its users. Use the aud claim to map each event to the associated app or web service.

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

How to handle Sign in with Apple Server to server Notifications?
 
 
Q