Apple

"Continue with Apple" on your Gateway's sign-in page.

Adds Continue with Apple to your Gateway's sign-in page, for people you've invited. Sign-in

Open developer.apple.com and create a Services ID.
Add the redirect URL https://<your gateway>/api/auth/callback/apple.
Copy:
- APPLE_SIGNIN_CLIENT_ID: The Services ID's identifier (com.example.gateway)
- APPLE_SIGNIN_CLIENT_SECRET: The client secret JWT you generate from your Sign in with Apple key (ES256; valid six months at most, then generate it again)

Apple returns to the Gateway with a POST; behind the outer ring, everyapp access on leaves /api/auth/callback/apple public (it only redirects to the same URL as a GET, which Access then checks).
The client secret is a JWT that expires within six months: generate a new one before then or sign-in stops.

Turn it on. It asks for each value:

everyapp signin add apple

Check it worked: everyapp signin show apple shows each setting as set. Then sign out and select the button.

More help

Ask your coding agent to set Apple up: the everyapp skill has the full guide (setup/signin-apple.md).

Something wrong or missing? Open an issue.