Hello Team,
Referred so many blogs and docs could not find the usage of refresh token in Apple Sign In.
1- What is the usage of refresh token which returns the result of accesstoken?
2- How do I get the identity details from refresh token?
3- If we do not get the identity details from refreshtoken, how do we validate the user in App server backend? Do we need to store the refresh token in server and match the refresh token received from App with its validity? Does this make sense? It rules out the entire usage of refresh token concept which actually provides the identity once again by validating it through client id and secret.
4- If #3 is the actual solution then are refresh token unique across all the Apple ID users?