Universal links & redirect not working on certain devices

We are currently doing our beta testing for our application and we are having some issues with universal links. The issues can be seen below:

  • we are using auth0 for authentication. In this process, after users verify their email addresses they should be redirected back to the application. For some users, they are directed back to a page that shows error 404. For other users where it works, they are directed back to the application. What could be my issue?

Our app-site- association file is hosted in the link below for reference.

https://yourmomentshub.com/.well-known/apple-app-site-association

Answered by DTS Engineer in 796041022

Thanks so much for the post. The link you shared is helpful. I have just tested the link you provided, and I am sharing the result with you as a file below.

 curl -v https://yourmomentshub.com/.well-known/apple-app-site-association
* Host yourmomentshub.com:443 was resolved.
* IPv6: (none)
* IPv4: 198xxxx
*   Trying 198xxxxx
* Connected to yourmomentshub.com (198.xxxx) port 443
* ALPN: curl offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/cert.pem
*  CApath: none
* (304) (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / [blank] / UNDEF
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=yourmomentshub.com
*  start date: Jun 15 02:31:29 2024 GMT
*  expire date: Jul 17 02:31:29 2025 GMT
*  subjectAltName: host "yourmomentshub.com" matched cert's "yourmomentshub.com"
*  issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2
*  SSL certificate verify ok.
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://yourmomentshub.com/.well-known/apple-app-site-association
* [HTTP/2] [1] [:method: GET]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: yourmomentshub.com]
* [HTTP/2] [1] [:path: /.well-known/apple-app-site-association]
* [HTTP/2] [1] [user-agent: curl/8.6.0]
* [HTTP/2] [1] [accept: */*]
> GET /.well-known/apple-app-site-association HTTP/2
> Host: yourmomentshub.com
> User-Agent: curl/8.6.0
> Accept: */*
> 
< HTTP/2 200 
< last-modified: Wed, 17 Jul 2024 17:41:35 GMT
< etag: "1360a18-f1-61d74f941571b"
< accept-ranges: bytes
< content-length: 241
< vary: Accept-Encoding
< date: Thu, 18 Jul 2024 21:23:27 GMT
< server: Apache
< 
{
  "applinks": {
    "details": [
      {
        "appID": “XXXXXXXX7.com.daramfon.MomentsHub",
        "paths": [
          "/moments/*",
          "/polls/*",
          "/profile/*",
          "/verified/*"
        ]
      }
    ]
  }
}

The file seems okay and has four paths.

I would recommend going over the Tech Note to debug common issues with universal links: https://developer.apple.com/documentation/technotes/tn3155-debugging-universal-links

Refer to the Tech Note for instructions on how to verify the file's format using the command 'sudo swcutil verify.' It is a comprehensive resource that will also guide you through setting up the file correctly. Please feel free to share your file here so I can provide further recommendations and suggestions.

Also, check your server settings where you host the file to ensure that it accepts all browser requests and traffic from user-agents of the form 'AASA-Bot/*'.

I hope this helps resolve the issue!

Thanks so much for the post. The link you shared is helpful. I have just tested the link you provided, and I am sharing the result with you as a file below.

 curl -v https://yourmomentshub.com/.well-known/apple-app-site-association
* Host yourmomentshub.com:443 was resolved.
* IPv6: (none)
* IPv4: 198xxxx
*   Trying 198xxxxx
* Connected to yourmomentshub.com (198.xxxx) port 443
* ALPN: curl offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/cert.pem
*  CApath: none
* (304) (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / [blank] / UNDEF
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=yourmomentshub.com
*  start date: Jun 15 02:31:29 2024 GMT
*  expire date: Jul 17 02:31:29 2025 GMT
*  subjectAltName: host "yourmomentshub.com" matched cert's "yourmomentshub.com"
*  issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2
*  SSL certificate verify ok.
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://yourmomentshub.com/.well-known/apple-app-site-association
* [HTTP/2] [1] [:method: GET]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: yourmomentshub.com]
* [HTTP/2] [1] [:path: /.well-known/apple-app-site-association]
* [HTTP/2] [1] [user-agent: curl/8.6.0]
* [HTTP/2] [1] [accept: */*]
> GET /.well-known/apple-app-site-association HTTP/2
> Host: yourmomentshub.com
> User-Agent: curl/8.6.0
> Accept: */*
> 
< HTTP/2 200 
< last-modified: Wed, 17 Jul 2024 17:41:35 GMT
< etag: "1360a18-f1-61d74f941571b"
< accept-ranges: bytes
< content-length: 241
< vary: Accept-Encoding
< date: Thu, 18 Jul 2024 21:23:27 GMT
< server: Apache
< 
{
  "applinks": {
    "details": [
      {
        "appID": “XXXXXXXX7.com.daramfon.MomentsHub",
        "paths": [
          "/moments/*",
          "/polls/*",
          "/profile/*",
          "/verified/*"
        ]
      }
    ]
  }
}

The file seems okay and has four paths.

I would recommend going over the Tech Note to debug common issues with universal links: https://developer.apple.com/documentation/technotes/tn3155-debugging-universal-links

Refer to the Tech Note for instructions on how to verify the file's format using the command 'sudo swcutil verify.' It is a comprehensive resource that will also guide you through setting up the file correctly. Please feel free to share your file here so I can provide further recommendations and suggestions.

Also, check your server settings where you host the file to ensure that it accepts all browser requests and traffic from user-agents of the form 'AASA-Bot/*'.

I hope this helps resolve the issue!

Universal links &amp; redirect not working on certain devices
 
 
Q