Issue in apple login

[asim46]

Keycloak Version
v24.0.3

Extension Version
1.12.0

Describe the bug
Log from keycloak:
[org.keycloak.events] (executor-thread-3624) type="TOKEN_EXCHANGE_ERROR", realmId="f552d7fa-8853-44b9-97fc-5948ca030801", clientId="quiz", userId="null", ipAddress="172.18.0.1", error="federated_identity_account_exists", auth_method="token_exchange", grant_type="urn:ietf:params:oauth:grant-type:token-exchange", subject_issuer="apple", validation_method="signature", client_auth_method="client-secret"

For first token exchange its working , user is created and on second attempt it throws above error from its log in keycloak
its working for google but not for apple

[klausbetz]

Hi @asim46,
thx for creating this issue.

This is an interesting bug. I tried Keycloak 24.0.4 and 1.12.0 and it works fine.
I exchanged an ID-Token of my own Apple-ID multiple times and got a valid response containing all the Keycloak tokens.

My Keycloak test instance has no special configuration besides the Apple Identity provider and the token_exchange permissions.

Do you have any special configuration in your realm? Like custom flows or so?