pmavP
ZITADELβ€’8mo agoβ€’
2 replies
pmav

Apple Sign-in "issuer does not match" error

Hello!
when using Apple sign-in I'm getting the following error: "issuer does not match" on the login UI

looks like Apple changed their OpenID config

looking at Zitadel code, points to appleid.apple.com:
https://github.com/zitadel/zitadel/blob/0ae3f2a6eab7dfe60f686ed08fca7c4f1c9822e1/internal/idp/providers/apple/apple.go#L18

but the OpenID config points to account.apple.com:
https://account.apple.com/.well-known/openid-configuration

I saw some other people having this issue on other applications, looks like that Apple just changed this without notice?
GitHub
ZITADEL - Identity infrastructure, simplified forΒ you. - zitadel/zitadel
zitadel/internal/idp/providers/apple/apple.go at 0ae3f2a6eab7dfe60f...
Was this page helpful?