[ad_1]
I’m implementing server to server communication for Apple app retailer notifications as described right here
https://developer.apple.com/documentation/appstoreservernotifications/
I can obtain a JWT and acquire the responseBodyV2 object.
https://developer.apple.com/documentation/appstoreservernotifications/responsebodyv2
I wish to check the JWT within the debugger at
I paste the signed payload into the left hand window within the debugger. The debugger decodes the payload, accurately identifies the algorithm as ES256, shows the x5c certificates chain and the payload knowledge. Within the “Confirm Signature” panel the debugger inserts the primary certificates within the certificates chain within the public key textual content field and leaves the non-public key textual content field empty. It additionally shows the message “Signature verified”.
I’ve two questions.
-
How can the debugger efficiently confirm the signature after I have not entered the shared secret from our Apple account? (I presume this needs to be entered within the non-public key textual content field).
-
Ought to I exploit the x5c certificates chain and if that’s the case how?
[ad_2]
