appleid.apple.com IPv6 support

Hi, I've been developing an app with a server. I'm hosting the server on an IPv6-ONLY network that's hidden behind the CloudFlare, so it works flawlessly from the clients point of view, but if server needs to access external resources, they need to be accessible over IPv6. As it turns out, appleid.apple.com doesn't support IPv6, and the Sign In with Apple happens with the help of my server. So, I can't sign users in as Apple doesn't support IPv6 traffic on appleid.apple.com. Are there any plans to support IPv6 in the near future, or should I work on the networking setup to enable IPv4 just for the Apple SSO? Or maybe there's a clever workaround I'm missing?

Answered by DTS Engineer in 892077022

Hi @spanasiuk,

You wrote:

Are there any plans to support IPv6 in the near future, or should I work on the networking setup to enable IPv4 just for the Apple SSO? Or maybe there's a clever workaround I'm missing?

I cannot comment on future plans. However, I'd suggest for you to submit a Feedback Assistant report requesting IPv6 support at appleid.apple.com and for all Sign in with Apple related endpoints and services. Once submitted, please reply here with the Feedback ID.

As a workaround, check for NAT64/DNS64 on your host. Many IPv6-only hosting providers provide a NAT64 gateway that transparently translates outbound IPv4 traffic. If DNS64 is active, appleid.apple.com may already resolve to a synthesized IPv6 address and work as expected without any code changes.

Another approach would be to us a dual-stack Virtual Private Server (VPS), which you'd run as a simple HTTS proxy to route only Sign in with Apple and Apple SSO request through it to transport to IPv6 over the wire. Since you're already using Cloudflare, use their support channels for the Cloudflare Worker proxy. Regardless, good luck with your search!

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

Hi @spanasiuk,

You wrote:

Are there any plans to support IPv6 in the near future, or should I work on the networking setup to enable IPv4 just for the Apple SSO? Or maybe there's a clever workaround I'm missing?

I cannot comment on future plans. However, I'd suggest for you to submit a Feedback Assistant report requesting IPv6 support at appleid.apple.com and for all Sign in with Apple related endpoints and services. Once submitted, please reply here with the Feedback ID.

As a workaround, check for NAT64/DNS64 on your host. Many IPv6-only hosting providers provide a NAT64 gateway that transparently translates outbound IPv4 traffic. If DNS64 is active, appleid.apple.com may already resolve to a synthesized IPv6 address and work as expected without any code changes.

Another approach would be to us a dual-stack Virtual Private Server (VPS), which you'd run as a simple HTTS proxy to route only Sign in with Apple and Apple SSO request through it to transport to IPv6 over the wire. Since you're already using Cloudflare, use their support channels for the Cloudflare Worker proxy. Regardless, good luck with your search!

Cheers,

Paris X Pinkney |  WWDR | DTS Engineer

appleid.apple.com IPv6 support
 
 
Q