David Kimura PRO said 9 months ago on Sign in with Apple :
Do you have skip_before_action :verify_authenticity_token in the controller that Apple is calling?