Sign in with Apple intermittent 400 invalid_request

Hello,

We are currently facing an issue with Apple Sign In that only occurs very rarely, and that for some reason mainly affects the Apple Review team, as everyone in the company can register with their personal Apple Account, and we can see multiple users in production using Apple Login.

The problem is that when our BackEnd tries to validate the information on https://appleid.apple.com/auth/token we receive a "{"error":"invalid_request"}". We have no idea what is causing this intermittent issue and we currently have no way to reproduce it.

We have been loging both succesull request and failing request and all look very simmilar and we have no ideia what may be causing the 400

here is an example of a curl that generated the problem

curl --location 'https://appleid.apple.com/auth/token'
--header 'Accept: application/json'
--header 'Content-Type: application/x-www-form-urlencoded'
--data-urlencode 'client_id=----SECRET----''
--data-urlencode 'client_secret=----SECRET----'
--data-urlencode 'grant_type=authorization_code'
--data-urlencode 'code=----SECRET----''
--data-urlencode 'redirect_uri=----SECRET----''

Any ideia what may be causing this?

Hi @robertodias180,

If you have an App Review Submission ID, we can gather more insight from the server logs captured there. If so, please submit a report via Feedback Assistant with the following information:

  • App ID (e.g., 123456789)
  • Bundle ID (e.g., com.myCompany.appName)
  • Sign in with Apple Services ID (e.g., com.myCompany.appName.serviceName)
  • Examples of failed Sign in with Apple /auth/authorize and /auth/token requests

Once submitted, please respond with the Feedback ID so I may escalate to the App Review team.

Cheers,

Paris

Sign in with Apple intermittent 400 invalid_request
 
 
Q