NeedleApple.Signed (needle_apple v0.1.1)

Utilities for handling signed payload.

Summary

payload()

The verified payload extracted from signed payload.

root_cert()

The root certificate that Apple offers on Apple PKI.

signed_payload()

A cryptographically signed payload, in JSON Web Signature (JWS) format.

Verifies a signed payload.

@type payload() :: map()

The verified payload extracted from signed payload.

@type root_cert() :: binary()

The root certificate that Apple offers on Apple PKI.

It's fine to use Apple Root CA - G3 Root.

@type signed_payload() :: String.t()

A cryptographically signed payload, in JSON Web Signature (JWS) format.

@spec verify(root_cert(), signed_payload()) ::
  {:ok, payload()}
  | {:error, :invalid_format | :invalid_cert_chain | :invalid_signature}

Verifies a signed payload.

Signed payloads are used in the responses of: