---
title: "Apple Native"
method: POST
path: "/v1/auth/apple/native"
tags: ["auth"]
---

# Apple Native

`POST /v1/auth/apple/native`

## Request

- Base URL: `https://api.actuato.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.actuato.com/v1/auth/apple/native`
- Auth: none declared

Sign in with Apple, finished on the device. The app sends what Apple signed.

## Request body

- AppleNativeSignIn: What Apple's button on the phone hands back.
  - `identity_token` string, required
  - `nonce` string, required
  - `full_name` string, nullable
  - `ref` string, nullable

## Response `200`

Successful Response

- AuthResponse
  - `user` UserOut, required
    - `id` string, uuid, required
    - `email` string, email, required
    - `display_name` string, required
    - `phone` string, nullable, required
    - `phone_verified_at` string, date-time, nullable
    - `email_verified_at` string, date-time, nullable
    - `status` 'active' | 'suspended' | 'deleted', required
    - `roles` string[], required
    - `is_worker` boolean, required
    - `identity_verification_status` 'none' | 'pending' | 'verified' | 'failed', required
    - `timezone` string, required
    - `created_at` string, date-time, required
  - `access_token` string, required
  - `refresh_token` string, nullable: Only returned to non-browser clients (no cookie jar).
  - `token_type` string
  - `mfa_required` boolean

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/actuato/apis/actuator-api.md) · [All operations](https://skmtc.dev/actuato/apis/actuator-api/llms.txt) · [OpenAPI document](https://skmtc.dev/actuato/apis/actuator-api/revisions/67a742c2308b?raw)
