Authentication

Apple Auth

Authenticate with an Apple identity token. Creates an account on first use.

The token is verified against Apple's JWKS (signature, iss, aud=bundle id, exp). Find-or-create by the stable Apple sub, falling back to a verified email match (Apple verifies emails it returns). Issues the SAME JWT session shape as the email-OTP login.

post/api/v1/auth/apple

Request

  • Base URL: https://api.gemstoneaiapp.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.gemstoneaiapp.com/api/v1/auth/apple
  • Auth: none declared

Headers

X-Device-Idinteger nullable

Request body

identity_tokenstring required

Apple identity token (JWT) from Sign in with Apple

full_namestring nullable

Display name — Apple only provides it on the first authorization

emailstring nullable

Email — Apple only provides it on the first authorization

gemstone_idsinteger[] nullable

Optional list of anonymous gemstone IDs to link to the user

promo_codestring nullable

Optional promo code to redeem on signup (LNK-PROMO)

Response

Successful Response

tokenstring required
refreshTokenstring required
gemstones_savedinteger nullable
is_new_userboolean nullable
promo_grantedstring nullable

Changes

No recorded changes to this operation across all 1 revision of this API.