Sign in with Apple response to authenticate CloudKit requests

I would like users to sign in with apple, then pass the token up to my server for validation. After validation I would like to make a user-authenticated cloudkit requests to fetch and modify data from the private database. Is this possible using the tokens returned from a sign-in-with-apple response?


Basically, I think I need to obtain a ckWebAuthToken for the cloudkit request, but I'm not sure how to get one without a user having to go through a second, web-based authentication.


I know there is a server-to-server flow for cloudkit but that is only for the public database, which doesn't help me in this case.


Any help here would be much appreciated.

Answered by DTS Engineer in 418048022

On Jul 3, 2019, devperson wrote:


> I would like users to sign in with apple, then pass the token up to my server for validation. After validation I would like to make a user-authenticated cloudkit requests to fetch and modify data from the private database. Is this possible using the tokens returned from a sign-in-with-apple response?


The unique user identifiers for Sign in with Apple and CloudKit are not linked. If you would like for Apple to consider adding this behavior in a future release, please submit an enhancement request to Feedback Assistant.

Accepted Answer

On Jul 3, 2019, devperson wrote:


> I would like users to sign in with apple, then pass the token up to my server for validation. After validation I would like to make a user-authenticated cloudkit requests to fetch and modify data from the private database. Is this possible using the tokens returned from a sign-in-with-apple response?


The unique user identifiers for Sign in with Apple and CloudKit are not linked. If you would like for Apple to consider adding this behavior in a future release, please submit an enhancement request to Feedback Assistant.

Is there any change to this or do we still need to authenticate user twice?

Is there any change to this or do we still need to authenticate user twice? 

Sign in with Apple response to authenticate CloudKit requests
 
 
Q