We have an issue where Safari on iOS is not handing off to our app after an Auth0 authentication redirect.
Issue
After a user completes sign-in via an Auth0-hosted login page in Safari, the callback redirect is followed as a plain HTTP navigation rather than being intercepted and handed off to the app.
Callback URL format
https://identity.example.com/ios/com.example.app/callback
Steps to reproduce
Open an Auth0 /authorize URL in Safari on iOS with a redirect_uri pointing to a Universal Link callback, log in, and observe that Safari navigates to the callback URL as a plain HTTP request rather than launching the app.
What works
ASWebAuthenticationSession inside the app handles the same callback correctly.
Navigating directly to a Universal Link launches the app, confirming AASA and Universal Links are correctly configured on the affected devices.
The issue is specific to Safari intercepting the callback URL when it arrives as the result of an Auth0 redirect.
Affected devices
Reproducible across multiple devices and iOS versions from iOS 18.x through iOS 26.x.
Does Safari have a restriction on intercepting Universal Links that result from a cross-domain redirect?
Any guidance appreciated 🙏
Topic:
App & System Services
SubTopic:
General
0
0
41