Apple SignIn, issuer changed?

Hi! We're having issues with the sign in flow, starting today. As per the documentation, the issuer of the tokens should be https://appleid.apple.com sign in docs.

But in the published configuration, it is now stated as https://account.apple.com metadata endpoint.

Once the token is received through the sign in flow, the issuer is however still appleid.apple.com. This is causing problems for us where we expect the issuer in the metadata endpoint to be the same as the actual token issuer. What is correct here?

This is a widespread issue but seems to have been resolved. The issuer returned by https://appleid.apple.com/.well-known/openid-configuration is back to being https://appleid.apple.com.

Tailscale & Supabase declared incidents because of it. https://status.tailscale.com/ https://status.supabase.com/

Apple SignIn, issuer changed?
 
 
Q