Universal Passwordless Links Are Not Working With Redirect

Overview

Passwordless login links in an iOS app take this format:

https://[our-email-service-tracking-link]

This redirects to URL:

https://[our-tenant-name].auth0.com/ios/com.[our-domain].app/email?code=129123

However, with the redirect, it is not possible to directly open the app from the link. The user must first open the link in a Safari browser.

Universal Links have been enabled in Xcode. However, although the final link does work perfectly, the redirect does not function as we expect.

It is desired that the user should be able to directly open the link, without the need to use a browser.

Applies To
  • Passwordless 
Solution
The reason why the link doesn't open with a redirect is due to a security feature of iOS. Apple wants the users to explicitly open the universal link in the browser instead of the link being triggered with a browser redirect.

Some people have developed workarounds, as in this Stack Overflow thread. As this is a 3rd party solution, Auth0 cannot guarantee that this will work as expected.

The best/easiest option would be to disable the tracking in the email service if possible for the passwordless links such that the links are sent unchanged.

Related References

Recommended content

No recommended content found...