---
title: "Native Apple token exchange"
method: POST
path: "/auth/mobile/apple/native"
tags: ["Auth, Billing, and Provider Callbacks"]
---

# Native Apple token exchange

`POST /auth/mobile/apple/native`

## Request

- Base URL: `https://getsocialclaw.com`
- URL: `https://getsocialclaw.com/auth/mobile/apple/native`
- Auth: none required

Exchanges a native Apple identity token for a SocialClaw dashboard session payload.

## Request body

- AppleNativeAuthRequest: Native iOS Sign in with Apple identity token exchange.
  - `identityToken` string, required: Apple identity token. Also accepted as identity_token.
  - `nonceSha256` string, nullable: SHA-256 nonce. Also accepted as nonce.
  - `email` string, nullable: Email supplied by Apple on first sign-in.
  - `givenName` string, nullable: Given name.
  - `familyName` string, nullable: Family name.
  - `name` string, nullable: Display name.

## Response `200`

Successful response.

- DashboardSessionResponse: Current dashboard session response.
  - `ok` unknown, required
  - `authenticated` boolean: Whether a dashboard session exists.
  - `user` object, nullable
  - `tenant` Tenant: Workspace visible to the authenticated API key or dashboard session.
    - `id` string, required: Workspace id.
    - `name` string, nullable: Workspace name.
    - `plan` string, nullable: Workspace plan.
    - `subscriptionStatus` string, nullable: Billing subscription status.
    - `entitlements` object, nullable: Plan capabilities and limits.
  - `membership` object, nullable

## Other responses

- `400`: Invalid request.
- `401`: Missing, invalid, or unauthorized credentials.
- `404`: Requested resource was not found.
- `422`: Request body or semantic validation failed.

---

[API](https://skmtc.dev/getsocialclaw/apis/socialclaw-api.md) · [All operations](https://skmtc.dev/getsocialclaw/apis/socialclaw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/getsocialclaw/apis/socialclaw-api/revisions/a11a6a5b9bc6?raw)