Merge pull request #321 from Quickchive/fix/use-rs-256

fix: get apple secret
Quickchive · May 5, 2024 · ea1fde2 · ea1fde2
2 parents 4dfc363 + 4e911af
commit ea1fde2
Showing 1 changed file with 15 additions and 11 deletions.
diff --git a/src/auth/util/oauth.util.ts b/src/auth/util/oauth.util.ts
@@ -73,17 +73,21 @@ export class OAuthUtil {
   }
 
   getAppleAccessToken(): string {
-    return this.jwtService.sign(
-      {},
-      {
-        audience: 'https://appleid.apple.com',
-        issuer: process.env.APPLE_TEAM_ID,
-        subject: process.env.APPLE_CLIENT_ID,
-        expiresIn: '1h',
-        keyid: process.env.APPLE_KEY_ID,
-        algorithm: 'RS256',
-      },
-    );
+    const claims = {
+      iss: process.env.APPLE_TEAM_ID,
+      iat: Math.floor(Date.now() / 1000),
+      exp: Math.floor(Date.now() / 1000) + 300,
+      aud: 'https://appleid.apple.com',
+      sub: process.env.APPLE_CLIENT_ID,
+    };
+
+    const privateKey = process.env.APPLE_SECRET_KEY;
+
+    return this.jwtService.sign(claims, {
+      keyid: process.env.APPLE_KEY_ID,
+      privateKey,
+      algorithm: 'ES256',
+    });
   }
 
   async getAppleToken(code: string) {