I believe I am experiencing the same issue described here, so I would like to add more details. In my iOS app, I implemented DeviceCheck token generation and server-side validation. On recent devices everything works as expected: the server validates the token successfully and returns status 200 along with the two bit values. However, on iPhone 6S running iOS 15.8.4 only, the request fails with: Request failed with status code 400 This happens consistently in both environments: Development: https://api.development.devicecheck.apple.com/v1 Production: https://api.devicecheck.apple.com/v1 On iPhone 6S, device.supported returns true, and the generated token is sent to the server. The token length is over 2000 characters (base64), and visually it looks similar to tokens from newer devices that work fine. So I don't think the app is failing to generate a token. Server side is implemented in TypeScript using jsonwebtoken: ^9.0
Topic:
Privacy & Security
SubTopic:
General
Tags: