chadtmiller.com/knotless

Switch repository

Loading…

What changes

/.well-known/apple-app-site-association also names the iOS app under webcredentials.

Why

iOS refuses an ASWebAuthenticationSession that uses an https callback unless the app is associated with the host by the webcredentials service, and cancels it at once. So the app's sign-in opened and closed immediately, on a properly signed build on a phone too. applinks alone isn't enough. The entitlement to match goes in the app's own pull.

How it was checked

the_app_logs_in_with_a_code_only_it_can_trade now reads the entry. Compiled with clippy here; the test is left to CI. That sign-in works can only be tried on a phone once this is live.

🤖 Generated with Claude Code

This adds webcredentials: {apps: [APP_ID]} to the apple-app-site-association response. It uses the same app ID as applinks, which is the shape Apple documents. The test now asserts the entry, and docs/reference/api.md is updated with it. Only the serve crate changes, so no changeset is needed. I found nothing to change. Whether sign-in works can only be confirmed on a device once this is deployed, as the body says.