Skip to content

Conversation

@Ryanmtate
Copy link
Contributor

This pull request introduces support for Apple App Attestation data parsing and validation based on Apple's developer documentation. The main changes include the addition of new data structures and parsing methods for attestation objects, as well as a test to verify certificate chain extraction. The new functionality is grouped into a dedicated module.

Apple App Attestation Support:

  • Added the new app_attestation module to src/definitions/mod.rs, which encapsulates all logic related to Apple App Attestation.
  • Implemented the AppleAppAttestData and AttestationStatement structs in src/definitions/app_attestation.rs, enabling deserialization and serialization of attestation objects as defined by Apple.
  • Provided parsing methods from_base64_string and from_cbor_bytes for AppleAppAttestData, allowing conversion from base64-encoded and CBOR-encoded attestation data respectively.

Testing and Validation:

  • Added a test that parses a sample base64-encoded attestation object, extracts the certificate chain, and validates its structure using the X5Chain builder.

Signed-off-by: Ryan Tate <ryan.tate@spruceid.com>
Signed-off-by: Ryan Tate <ryan.tate@spruceid.com>
Signed-off-by: Ryan Tate <ryan.tate@spruceid.com>
@Ryanmtate Ryanmtate merged commit 1eae8d6 into main Dec 10, 2025
1 check passed
@Ryanmtate Ryanmtate deleted the feat/apple-app-attestation-definition branch December 10, 2025 22:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants