ExtractAppleEmailFromIDToken

auth/social_login.go

@@ -71,3 +71,19 @@ func ValidateAppleCode(code, redirectURI, encryptionKeySecret string, isDebug bo
 
 	return string_utils.InterfaceToString(email)
 }
+
+func ExtractAppleEmailFromIDToken(idToken string) (string, error) {
+	claim, err := apple.GetClaims(idToken)
+	if err != nil {
+		return "", err
+	}
+
+	email := (*claim)["email"]
+	emailVerified := (*claim)["email_verified"]
+
+	if emailVerified != true {
+		return "", errors.Error("email not verified")
+	}
+
+	return string_utils.InterfaceToString(email)
+}