rawUserJson

Apple's user field, verbatim JSON, present only on the very first authorization. Apple never sends the name again — not on re-sign-in, not on token refresh. Persist it server-side on first sight or it is gone for that Apple ID forever (short of the user revoking the grant in Settings and starting over).