feat: support multiple aud for apple oauth (#3710)

* support multiple aud

* update

* update

* changeset

.changeset/strong-points-admire.md

@@ -0,0 +1,5 @@
+---
+"better-auth": patch
+---
+
+feat: support for multiple aud for apple oauth

packages/better-auth/src/social-providers/apple.ts

@@ -70,6 +70,7 @@ export interface AppleNonConformUser {
 
 export interface AppleOptions extends ProviderOptions<AppleProfile> {
 	appBundleIdentifier?: string;
+	audience?: string;
 }
 
 export const apple = (options: AppleOptions) => {
@@ -116,7 +117,12 @@ export const apple = (options: AppleOptions) => {
 			const { payload: jwtClaims } = await jwtVerify(token, publicKey, {
 				algorithms: [jwtAlg],
 				issuer: "https://appleid.apple.com",
-				audience: options.appBundleIdentifier || options.clientId,
+				audience:
+					options.audience && options.audience.length
+						? options.audience
+						: options.appBundleIdentifier
+							? options.appBundleIdentifier
+							: options.clientId,
 				maxTokenAge: "1h",
 			});
 			["email_verified", "is_private_email"].forEach((field) => {