dev said almost 3 years ago on Sign in with Apple :
fixed. I missed `  skip_before_action :verify_authenticity_token` in my controller