apple_devicecheck_jwt_token_generation_with_es256.py

1import time
2import jwt # PyJWT library (pip install PyJWT)
3
4# Configuration constants provided by your Apple Developer Account
5KEY_ID = 'YOUR_KEY_ID'          # The 10-character Key ID from the Certificates, Identifiers & Profiles section
6TEAM_ID = 'YOUR_TEAM_ID'        # Your Apple Team ID
7PRIVATE_KEY_PATH = 'AuthKey_XXXXXXXXXX.p8' # Path to the .p8 file downloaded from Apple
8
9def generate_devicecheck_token():
10    """
11    Generates a JWT for authenticating with Apple's DeviceCheck HTTP/2 API.
12    Tokens are valid for 1 hour; Apple recommends refreshing them periodically.
13    """
14    with open(PRIVATE_KEY_PATH, 'r') as f:
15        private_key = f.read()
16
17    headers = {
18        'alg': 'ES256',
19        'kid': KEY_ID,
20    }
21
22    payload = {
23        'iss': TEAM_ID,
24        'iat': int(time.time()),
25    }
26
27    # Generate the token using the ECDSA algorithm (ES256)
28    token = jwt.encode(
29        payload,
30        private_key,
31        algorithm='ES256',
32        headers=headers
33    )
34
35    return token
36
37if __name__ == "__main__":
38    # Example usage
39    auth_token = generate_devicecheck_token()
40    print(f"Authorization: Bearer {auth_token}")