Login via Apple

To let your users sign in with their Apple account (also known as Sign in with Apple), follow the below steps.

1. Log in to the Apple Developer portal and navigate to Certificates, Identifiers & Profiles.
2. Under Identifiers, create an App ID (type App) for your website (for example, com.example.myblog), and enable the Sign in with Apple capability for it.

   

3. Create another identifier of the type Services ID (for example, com.example.myblog.comentario). This value will be your client ID (the key in the secrets config below).

   

4. Enable Sign in with Apple for the Services ID and click Configure:
   • Select the App ID created above as the Primary App ID.
   • Under Website URLs, register your Comentario domain and the return URL: https://<your-comentario-domain>/api/oauth/apple/callback

     

5. Under Keys, create a new key with Sign in with Apple enabled.

   

6. Select the above App ID as its primary App ID. Download the private key file (AuthKey_XXXXXXXXXX.p8) — it can only be downloaded once — and note the Key ID.

   

7. Also note your Team ID, displayed in the top right corner of the Developer portal (also available under Membership details).
8. Update the secrets configuration with the above data. The key is the Services ID, and the secret is the contents of the downloaded .p8 key file:

...
idp:
  apple:
    key:    com.example.myblog.comentario
    teamId: 94BW9C26AR
    keyId:  W6X78PL0DM
    secret: |
      -----BEGIN PRIVATE KEY-----
      MIGTAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBHkwdwIBAQQg8FbGnk6xrqDLGYsF
      ...
      -----END PRIVATE KEY-----
...

9. Restart Comentario. You should now see Apple under Configured federated identity providers on the Static configuration page of the Administration UI.
10. Still in the Admin UI, navigate to the desired domain properties and tick off Apple on the Authentication tab, then click Save.

    

That’s it! Your users should now be able to login using the Apple button in the Login dialog.

See also

• Secrets
• Authentication