Skip to main content
Version: 3.2.0

Configuration

This page covers configuration options for the Apple identity provider beyond the basic setup.

Web Routes Configuration​

Apple Sign-In requires web routes for handling callbacks and notifications. These routes must be configured both on Apple's side and in your Serverpod server.

The revokedNotificationRoutePath is the path that Apple will call when a user revokes their authorization. The webAuthenticationCallbackRoutePath is the path that Apple will call when a user completes the sign-in process.

These routes are configured in the pod.configureAppleIdpRoutes() method:

pod.configureAppleIdpRoutes(
  revokedNotificationRoutePath: '/hooks/apple-notification',
  webAuthenticationCallbackRoutePath: '/auth/callback',
);

Configuring Apple Sign-In on the App​

Apple Sign-In requires additional configuration for web and Android platforms. On native Apple platforms (iOS/macOS), the configuration is automatically handled by the underlying sign_in_with_apple package through Xcode capabilities.

Passing Configuration in Code​

You can pass the configuration directly when initializing the Apple Sign-In service:

client.auth.initializeAppleSignIn(
  serviceIdentifier: 'com.example.app',
  redirectUri: 'https://example.com/auth/callback',
);

The serviceIdentifier is your Apple Services ID (configured in Apple Developer Portal), and the redirectUri is the callback URL that Apple will redirect to after authentication (must match the URL configured on the server).

note

These parameters are only required for web and Android platforms. On native Apple platforms (iOS/macOS), they are ignored and the configuration from Xcode capabilities is used instead.

Using Environment Variables​

Alternatively, you can pass configuration during build time using the --dart-define option. The Apple Sign-In provider supports the following environment variables:

  • APPLE_SERVICE_IDENTIFIER: The Apple Services ID.
  • APPLE_REDIRECT_URI: The redirect URI for authentication callbacks.

If serviceIdentifier and redirectUri values are not supplied when initializing the service, the provider will automatically fetch them from these environment variables.

Example usage:

flutter run \
  -d "<device>" \
  --dart-define="APPLE_SERVICE_IDENTIFIER=com.example.app" \
  --dart-define="APPLE_REDIRECT_URI=https://example.com/auth/callback"

This approach is useful when you need to:

  • Manage configuration separately for different platforms (Android, Web) in a centralized way.
  • Avoid committing sensitive configuration to version control.
  • Configure different credentials for different build environments (development, staging, production).
tip

You can also set these environment variables in your IDE's run configuration or CI/CD pipeline to avoid passing them manually each time.