Sign in with Apple: domains to whitelist

We are developing a captive portal for a community Wi-Fi service that will be deployed to thousands of locations around the world. The service is a paid service that sells Wi-Fi connectivity by data volume rather than time. We want to enable our customers to Sign in with Apple without giving them full internet access until they have made a purchase. This requires us to whitelist domains and URLs to make this work.

Where can I find a complete list of domains that are required for Sign in with Apple to function correctly? It’s not possible for us to whitelist *.apple.com because that results in significant (free) background network traffic during the sign in process. So far we have whitelisted:

  • account.apple.com
  • appleid.apple.com
  • appleid.apple-cdn.com
  • idmsa.apple.com
  • gsa.apple.com
  • mzstatic.com

Our customers are still having issues with Sign in with Apple while interacting with our captive portal in the iOS pseudo browser. How can we debug this because we cannot use the Safari developer tools with the pseudo browser. Are there any logs when doing this on a Mac that we can check in the Console?

If we kick the user out to Safari then they are able to complete the Sign in with Apple process, but that is not the user experience we want.

Answered by DTS Engineer in 818282022

Hi @fingerz,

There is not a public list of domains used for Sign in with Apple. To debug your captive network browsing experience, you should still be able to use the Network trace tools in Instruments while running your app.

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Hi @fingerz,

There is not a public list of domains used for Sign in with Apple. To debug your captive network browsing experience, you should still be able to use the Network trace tools in Instruments while running your app.

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Sign in with Apple: domains to whitelist
 
 
Q