Apple authentication

Apple (Sign in with Apple) lets your users sign in with the Apple ID they already use on their devices. Once connected, you can offer “Continue with Apple” in your WeWeb login flows.

What this integration supports

• Social sign in with Apple ID
• Redirect to different pages for success, error, and first-time users

Setup in the Apple dashboard

In Apple, you’ll create an app identifier and sign-in credentials.

1. Go to Apple Developer.
2. Create (or select) an app identifier for your project.
3. Enable Sign in with Apple for that identifier.
4. Add your redirect URL (the URL Apple sends users back to after login).
   • Use the WeWeb callback URL: the address of your app followed by /api/auth/callback/apple. The table below lists the URLs to add.
5. Copy the credentials Apple provides for your sign-in setup.

Add one callback URL for each place where users sign in:

Where users sign in	Callback URL to add in Apple
Editor	https://<your-project>-editor.weweb.io/api/auth/callback/apple
Staging app	https://<your-project>-staging.weweb.io/api/auth/callback/apple
Published app	https://<your-project>-production.weweb.io/api/auth/callback/apple
Custom domain	https://your-domain.com/api/auth/callback/apple

Replace <your-project> with your project's WeWeb subdomain. You can see it in your browser's address bar when the editor is open, for example bright-harbor in https://bright-harbor-editor.weweb.io.

CALLBACK URL VS SUCCESS PAGE

Apple always sends users back to the callback URL, never to a page of your app. WeWeb then completes sign in and takes users to the Success Page, Error Page, or New User Page you choose in the Sign in with social provider action. Do not add the URL of these pages in Apple.

Connect Apple in WeWeb

1. In the WeWeb editor, open the Data & API tab, then open the Authentication subtab and go to SSO Providers.
2. Select Apple.
3. Turn on the Enable toggle.
4. Paste the values you copied from Apple into the fields shown in WeWeb (Client IDs and Secret Key (for OAuth)).
5. Click Save.

Test sign in

1. In Interface, add a “Continue with Apple” button.
2. Create a workflow and add Sign in with social provider.
3. Set:
   • Provider: apple
   • Success Page, Error Page, and (optionally) New User Page
4. Preview your app and click the button to complete the Apple sign-in flow.

For details about protecting pages and data once the user is signed in, see the main auth docs.

Common pitfalls

Redirect URL mismatch

If Apple rejects the login with a redirect or callback error, the redirect URL in Apple does not match the callback URL used by WeWeb.

• Re-check the exact URL in Apple (including https:// and the /api/auth/callback/apple path, with no trailing slash).
• Make sure you’re testing the same environment (editor, staging app, published app, or custom domain) that you configured.
• Make sure you didn’t add the URL of your Success Page instead of the callback URL.

Using the wrong domain

If sign in works on one domain but not another, make sure your published domain and any custom domains are allowed in Apple for your app.

Sign in stops working after 6 months

Apple OAuth secret keys expire every 6 months. When the key expires, users on the web can no longer sign in with Apple, even though nothing changed in your app.

To fix it, generate a new secret key in your Apple developer account and paste it in the Secret Key (for OAuth) field of the Apple provider in WeWeb, then click Save. Set a reminder to do this before the 6 months are up.

Reference

Settings

Setting in WeWeb	Description	Where to find it in Apple
Client IDs	Identifies your app for Apple sign in. This is your Apple Services ID.	In your Apple app / service identifier settings.
Secret Key (for OAuth)	Used to validate your app when completing sign in.	In the credentials section for Sign in with Apple.

FAQs

Which redirect URL should I add in Apple?

Add the address of your app followed by /api/auth/callback/apple, for example https://your-domain.com/api/auth/callback/apple. Add one for each place where users sign in (editor, staging app, published app, custom domain). The URL of your Success Page is not the redirect URL.

Can I use Apple sign in and email/password together?

Yes. You can enable multiple providers and let users choose how to sign in.