Apple SSO stores first name in family_name

[leahneukirchen]

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Ory Network Project

No response

Describe the bug

As can be seen here, the Apple OIDC provider stores the Apple-provided "first name" in the "family_name" claim, but the "family_name" claim is for the "last name":

https://github.com/ory/kratos/blob/95dc7a20f49aa682f324b70e507ec56c20159ebb/selfservice/strategy/oidc/provider_apple.go#L142C1-L144C6

E.g. the Patreon provider does it right.

Reproducing the bug

Write a OIDC data mapper that uses family_name, it contains the first name.

Relevant log output

No response

Relevant configuration

No response

Version

HEAD

On which operating system are you observing this issue?

None

In which environment are you deploying?

None

Additional Context

No response