No mention of callback url in docs for Apple

I am adding social sign in and already added entra and google. However with apple, it works and i am getting the prompt to sign in with them however after that is done i get error

{"code":"INVALID_ORIGIN","message":"Invalid origin"}

{"code":"INVALID_ORIGIN","message":"Invalid origin"}

There was no redirect url explanation in the docs so i assumed it would be

https://domain/api/auth/callback/apple

https://domain/api/auth/callback/apple

and added it to the redirect urls in apple's service
But... i think thats wrong? cause my redirection keeps erroring out with Invalid origin.

Is there a step i am missing to why there isnt a redirect url?
Thank you

GenioOP•4/16/25, 9:01 PM

Apple's ( No redirect url)

GenioOP•4/16/25, 9:01 PM

GenioOP•4/16/25, 9:02 PM

Microsoft

GenioOP•4/16/25, 9:03 PM

Also, there should be a note saying the same as the tiktok docs since apple is the same and doesnt work with localhost.

Is there a way for me to contribute to the docs ?

nikatune•4/17/25, 3:28 AM

yeah just go github

KiNFiSH•4/17/25, 3:50 AM

yeah it needs an update feel free to do that

GenioOP•4/17/25, 5:28 AM

Thank you, will do that. However, do you guys have any idea what is causing the

{"code":"INVALID_ORIGIN","message":"Invalid origin"}

{"code":"INVALID_ORIGIN","message":"Invalid origin"}

error ?

KiNFiSH•4/17/25, 8:13 AM

do you have a trustedOrigins config on authConfig and it may be likely affecting your origin check

KKiNFiSH do you have a trustedOrigins config on authConfig and it may be likely affectin...

GenioOP•4/17/25, 3:57 PM

Yep, I added it later on and it worked, but that’s weird. Shouldn’t the Apple domain already be trusted?

GGenio Yep, I added it later on and it worked, but that’s weird. Shouldn’t the Apple do...

Ping•4/20/25, 2:28 AM

You had to add apple's origin to trustedOrigin to work?

PPing You had to add apple's origin to trustedOrigin to work?

GenioOP•4/20/25, 8:37 PM

Yeah

GenioOP•4/20/25, 8:38 PM

Currently i think the docs lack in that part of how to add apple as a provider. So, i will try to contribute to it whenever i can

GGenio Currently i think the docs lack in that part of how to add apple as a provider. ...

Ping•4/21/25, 1:50 AM

Yes thanks

PPing Yes thanks

GenioOP•4/24/25, 9:03 PM

There was no clear mention of the this in the contribution docs but i was wondering, is it okay to use a component that generates the apple JWT on the clinet side ?

GenioOP•4/24/25, 9:03 PM

I was thinking of making it easier to generate in house just like how the secret is generated in the installation manual

GenioOP•4/24/25, 9:47 PM

https://github.com/better-auth/better-auth/pull/2430

GitHub

docs: Add guide for Sign In with Apple by TheGenio · Pull Request ...

I noticed the docs were lacking in regards to apple sign in integration so i wanted to contribute to make sure others have an easier time than me.
I Noticed that step 1 was longer than all other st...

GenioOP•4/24/25, 9:47 PM

pr open

squishycantaloupe•5/24/25, 5:31 AM

I'm trying to figure out apple sign in -- shouldn't the jwt be generated on the server as it requires a bunch of sensitive information as input (e.g, the p8 file)