Registry /
security / cloudflare-apple-sign-in
Install & Compatibility
Where this runs
No compatibility data collected yet for this library.
Code
Verified usage
Verified import paths — ran on the pinned version, not inferred.
AppleSignIn
✓ import { AppleSignIn } from 'cloudflare-apple-sign-in'
✗ import AppleSignIn from 'cloudflare-apple-sign-in'
Named export, not default. Also works with CJS require.
AppleSignInOptions
✓ import type { AppleSignInOptions } from 'cloudflare-apple-sign-in'
✗ import { AppleSignInOptions } from 'cloudflare-apple-sign-in'
TypeScript type import. Do not use as value at runtime.
AuthorizationUrlOptions
✓ import type { AuthorizationUrlOptions } from 'cloudflare-apple-sign-in'
✗ import { AuthorizationUrlOptions } from 'cloudflare-apple-sign-in'
TypeScript type for getAuthorizationUrl options.
Shows instantiation, authorization URL generation, token exchange, and ID token verification.
import { AppleSignIn } from 'cloudflare-apple-sign-in';
const appleSignIn = new AppleSignIn({
clientId: "com.example.app",
teamId: "5B645323E8",
keyIdentifier: "U3B842SVGC",
privateKey: `-----BEGIN PRIVATE KEY-----\nMIGTAgEHIHMJKJyqGSM32AgEGC...-----END PRIVATE KEY-----`
});
// Generate authorization URL
const authUrl = appleSignIn.getAuthorizationUrl({
redirectUri: "https://example.com/callback",
scope: ["name", "email"],
state: "random-state"
});
// Exchange authorization code for tokens
const tokens = await appleSignIn.getAuthorizationToken(authCode, {
redirectUri: "https://example.com/callback"
});
// tokens contains id_token, access_token, refresh_token
// Verify identity token
const claims = await appleSignIn.verifyIdToken(tokens.id_token, {
ignoreExpiration: false
});
console.log(claims.sub); // Apple user ID
Errors
Common errors & fixes
error:0300009C:digital envelope routines::operation not supported
Node.js 17+ OpenSSL 3 incompatibility with certain crypto operations.
fixUse NODE_OPTIONS=--openssl-legacy-provider or upgrade library to v1.0.7+.
MissingAppleSignInConfigError: Missing required config 'clientId'
AppleSignIn constructor called without required fields.
fixPass clientId, teamId, keyIdentifier, and privateKey in options object.
AppleSignInError: invalid_grant
Authorization code expired or invalid.
fixEnsure code is fresh and not reused; redirectUri must match exactly the one used in auth URL.
TypeError: Cannot read properties of undefined (reading 'sub')
verifyIdToken returns undefined or null when token is invalid.
fixCheck if result exists before accessing claims; add try/catch.
Audit
Dependencies
No dependency data recorded yet.