Way to handle multiple audience? about apple-sign-in-php-sdk HOT 4 CLOSED

I think it's kinda industry standard to have the prod and stage environments separated.

Oh right, you got a point. I will think about it first, thanks!

from apple-sign-in-php-sdk.

Hey @fd6130,

Thank for your question.

You will have to create 2 different instances of JwtVelidator and inject the proper instance depending on a profile.

$prodJwtValidator = new Auth\Jwt\JwtValidator(
                new \Lcobucci\JWT\Validation\Validator(),
                [
                    new \Lcobucci\JWT\Validation\Constraint\IssuedBy('https://appleid.apple.com'),
                    new \Lcobucci\JWT\Validation\Constraint\PermittedFor('com.c.azimo.stage')
                ]
      ),
$stageJwtValidator = new Auth\Jwt\JwtValidator(
                new \Lcobucci\JWT\Validation\Validator(),
                [
                    new \Lcobucci\JWT\Validation\Constraint\IssuedBy('https://appleid.apple.com'),
                   new \Lcobucci\JWT\Validation\Constraint\PermittedFor('com.c.azimo.stage2')
                ]
      ),

from apple-sign-in-php-sdk.

Hey @fd6130,

Thank for your question.

You will have to create 2 different instances of JwtVelidator and inject the proper instance depending on a profile.

$prodJwtValidator = new Auth\Jwt\JwtValidator(
                new \Lcobucci\JWT\Validation\Validator(),
                [
                    new \Lcobucci\JWT\Validation\Constraint\IssuedBy('https://appleid.apple.com'),
                    new \Lcobucci\JWT\Validation\Constraint\PermittedFor('com.c.azimo.stage')
                ]
      ),
$stageJwtValidator = new Auth\Jwt\JwtValidator(
                new \Lcobucci\JWT\Validation\Validator(),
                [
                    new \Lcobucci\JWT\Validation\Constraint\IssuedBy('https://appleid.apple.com'),
                   new \Lcobucci\JWT\Validation\Constraint\PermittedFor('com.c.azimo.stage2')
                ]
      ),

Oh my, so I have to create two AppleJwtFetchingService instance for this case? Might quite inconvenient for app that have one login api only.

Thanks for the help, I think i will try to think about a better solution and if possible i will purpose a PR later.

from apple-sign-in-php-sdk.

I think it's kinda industry standard to have the prod and stage environments separated.

I'm happy to review the PR.

from apple-sign-in-php-sdk.