This is a widespread issue but seems to have been resolved. The issuer returned by https://appleid.apple.com/.well-known/openid-configuration is back to being https://appleid.apple.com. Tailscale & Supabase declared incidents because of it. https://status.tailscale.com/ https://status.supabase.com/