The id_token is missing from all instances of TokenResponse

The TokenResponse (https://developer.apple.com/documentation/sign_in_with_apple/tokenresponse) returned from https://appleid.apple.com/auth/token does not contain "id_token" field, effectively rendering SIWA non-working:
{"access_token":"...","token_type":"Bearer","expires_in":3600,"refresh_token":"..."}

The "id_token" is the only field that can be validated since it's a JWT and contains the user's identity (subject) that can be used to match with our backend's records.

This started about 4 hours ago and is still not fixed.
I posted feedback at https://feedbackassistant.apple.com/feedback/9024635, duplicating here if someone can give any advice.
Up vote post of onyXMaster Down vote post of onyXMaster
2.4k views
Posted by
onyXMaster
Reply
Add a Comment

Replies

We are having the same issue, id_token is missing :(

Response from https://appleid.apple.com/auth/token:

{
"access_token": "<access_token>",
"token_type": "Bearer",
"expires_in": 3600,
"refresh_token": "<refresh_token>"
}

It started 3 hours ago.
Posted by
renatosnrg
Post not yet marked as solved Up vote reply of renatosnrg Down vote reply of renatosnrg
Add a Comment
Having the same issue and I've started receiving jwt payloads with an access_token but without an id_token. This is breaking functionality on our site. Help!!
Posted by
thayden@gmail.com
Post not yet marked as solved Up vote reply of thayden@gmail.com Down vote reply of thayden@gmail.com
Add a Comment
I am experiencing the same issue with my app -- no users can sign up or sign back in. Since the identity token is blank -- I can't decode and verify. Hopefully gets fixed soon... I've noticed it for the last hour.
Posted by
mickdev
Post not yet marked as solved Up vote reply of mickdev Down vote reply of mickdev
Add a Comment
It's intermittent, sometimes it returns the id_token, and for some apps it does not return at all.

Expected response:

{
"access_token": "<access_token>",
"token_type": "Bearer",
"expires_in": 3600,
"refresh_token": "<refresh_token>",
"id_token": "<id_token>"
}
Posted by
renatosnrg
Up vote reply of renatosnrg Down vote reply of renatosnrg
Add a Comment
We're seeing the same issue here at Khan Academy. Started around 5:40am PDT. The TokenResponse has all fields except the id_token. As a result, Sign in with Apple is unusable for us right now.
Posted by
jeremy_khan
Post not yet marked as solved Up vote reply of jeremy_khan Down vote reply of jeremy_khan
Add a Comment
Has anyone had any luck getting this fixed or reaching out to apple?
Posted by
thayden@gmail.com
Up vote reply of thayden@gmail.com Down vote reply of thayden@gmail.com
Add a Comment
I am also seeing the id_token missing from requests coming from Apple to my servers for the Sign in with Apple JS callback flow. Which is breaking the sign in flow. No changes were made to the scopes requested on the client initiating the OIDC request. Started happening at 8am MDT.
Posted by
asjdfaosijdfoiajsdpfoi
Up vote reply of asjdfaosijdfoiajsdpfoi Down vote reply of asjdfaosijdfoiajsdpfoi
Add a Comment
It seems to have been resolved 47min ago based on our reports.
Posted by
ferran@demand
Up vote reply of ferran@demand Down vote reply of ferran@demand
Add a Comment
We still have the issue :(
Posted by
renatosnrg
Up vote reply of renatosnrg Down vote reply of renatosnrg
Add a Comment
Seems to have resolved here too.
Posted by
jeremy_khan
Up vote reply of jeremy_khan Down vote reply of jeremy_khan
Add a Comment
Where can we read about the issue and its fix on Apple platform? It is obvious that there was a bad deployment, downtime, and a hot-fix / rollback. This is needed for customer accountability.
Posted by
beria
Post not yet marked as solved Up vote reply of beria Down vote reply of beria
Add a Comment
We still have the issue for some of our customers.

Last error: 30 minutes ago.

It's intermittent.
Posted by
renatosnrg
Up vote reply of renatosnrg Down vote reply of renatosnrg
Add a Comment
Since that time (5 hours ago) we didn't have errors anymore. It seems to have back to normal.
Posted by
renatosnrg
Up vote reply of renatosnrg Down vote reply of renatosnrg
Add a Comment