(1) Context: Our project has a login feature via WEBVIEW (using SFSafariViewController) and integrates PassKey on the Web side.
- The app listens for a successful login by capturing the redirect URL via the delegate of SFSafariViewController.
(2) Issue:
- On iOS < 18.4: The redirect URL is captured with full parameters returned.
https://xyz.com/home?session_state=...&code=...
- On iOS ≥ 18.4: The redirect URL is captured successfully but missing parameters.
https://xyz.com/home
We currently suspect that the issue originates from the SFSafariViewController framework after the release of iOS 18.4.
Has anyone experienced a similar issue? We would also appreciate support from the Apple team.
Different DTS Engineer here.
Thanks for those bug numbers. I was able to use them to track down some interesting info.
The iOS 18.4 change was a deliberate fix to address a security problem (r. 139228173). That’s caused issues for a number of developers and we’re still investigating what we can do to resolve it (r. 148942784). In the meantime, my advice is that you investigate whether it’s feasible to switch your authentication from SFSafariViewController
to Authentication Services. If you can then that’ll get around this problem, and it’s a better long-term direction.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"