Apple Sign-in "issuer does not match" error
Hello!
when using Apple sign-in I'm getting the following error: "issuer does not match" on the login UI
looks like Apple changed their OpenID config
looking at Zitadel code, points to appleid.apple.com:
https://github.com/zitadel/zitadel/blob/0ae3f2a6eab7dfe60f686ed08fca7c4f1c9822e1/internal/idp/providers/apple/apple.go#L18
but the OpenID config points to account.apple.com:
https://account.apple.com/.well-known/openid-configuration
I saw some other people having this issue on other applications, looks like that Apple just changed this without notice?
GitHub
zitadel/internal/idp/providers/apple/apple.go at 0ae3f2a6eab7dfe60f...
ZITADEL - Identity infrastructure, simplified for you. - zitadel/zitadel
2 Replies
update: looks like Apple reverted the changes and it is now working on our side again
I also had the same problem. You just have to wait some hours. I think is just a shadow ban.
https://discord.com/channels/927474939156643850/1382634908480176201