Additionally, I wanted to share a peculiar, device-specific observation that may help diagnose the underlying issue:
Persistent Failure State on a Single Device
After the first occurrence of the JWT-generation error on a given device, even previously working builds (including the current production version) begin failing with the same WeatherKit JWT error on that device. In contrast, other devices that have never encountered this error continue to run those same builds without issue. Uninstalling the app from the “stuck” device does not clear the problem—subsequent reinstalls of builds that worked before still fail immediately.
Steps Already Taken
Rebuilt and reinstalled known-good versions on the affected device.
Regenerated provisioning profiles and confirmed entitlements are correctly embedded.
Rebooted the device, reset network/location/privacy settings, and signed out/in of Apple ID.
Confirmed that other devices (same iOS version, same app binary) remain unaffected until they trigger the error the first time.
Verified device date/time and network connectivity to Apple endpoints.
Implication
This behavior strongly suggests that once WeatherKit’s auth flow fails initially, some daemon or OS-level cache enters a bad state on that device, which persists across app reinstalls. It appears independent of the app binary itself (since older known-good builds also break), and is isolated to that device.