ASAuthorizationController passkeys not working when applinks contain wildcard domains

Hey, I'm looking for some help with ASAuthorizationController and passkeys. It seems that wildcards in applinks used for subdomains break passkeys for the main domain.

The app has the following entries in entitlements (where mydomain.com is a placeholder for the actual domain):

webcredentials: mydomain.com
applinks: mydomain.com
applinks: *.mydomain.com

The AASA file is hosted only at mydomain.com and contains a correctly formatted webcredentials entry:

{
	"webcredentials": {
		"apps": [
			"app-id-corretly-formatted"
		]
	},
	"applinks": {
		"apps": [],
		"details": [
			// ...			
		]
	}
}

When I use ASAuthorizationController with the domain mydomain.com, it reports the following error:

Error Domain=com.apple.AuthenticationServices.AuthorizationError Code=1004
"Application with identifier X is not associated with domain mydomain.com"
UserInfo={NSLocalizedFailureReason=Application with identifier
X is not associated with domain mydomain.com

If I remove the following line from the entitlements applinks: *.mydomain.com, it works as expected:

webcredentials: mydomain.com
applinks: mydomain.com

It appears that the problem is with the wildcard in the subdomains. Has someone experienced this issue?

  • same problem here! by the way, can one passkey be available to every sub-domain under the associated domain?

Add a Comment