Developers can call a local refresh API (getCredentialsState) to confirm that the user is still securely signed in to iCloud on the device and allow the use...
https://www.apple.com/jp/privacy/docs/Sign_in_with_Apple_White_Paper_Nov_2019.pdf