Verify the Apple id token on the server side.
github.com/stefan-prokop-cz/verify-apple-id-token
stefan-prokop-cz/verify-apple-id-token