Skip to content
- Add-on id
kv_apple_login, tables kv_apl_*, namespace Tygh\Addons\KvAppleLogin.
- Generated from the Social Login Pro code base (
addons/social_login_pro/editions/build.py): same flow, provider list limited to Apple.
- Verification: Apple ID token: RS256 signature against Apple’s published keys, issuer https://appleid.apple.com, audience = your Services ID, expiry and nonce. Apple confirms every address it sends, including private relay addresses.
- Flow: state (single use, 15 minutes), browser-binding cookie, PKCE where the provider supports it, encrypted secrets (AES-256-CBC + HMAC with a key derived from the store’s crypt key).
- PHP hooks:
post_delete_user, update_profile; template hooks index:login_buttons, index:scripts, index:styles, profiles:account_update; no core changes.
- Full page cache: the button markup depends only on settings and keys (same for every visitor).
Edition::deferred(): true while kv_social_login_pro is active.
