Apple SSO breaks after Django 4 upgrade

73 Views Asked by wonton At 21 October 2024 at 03:35

After upgrading from django 3 to django 4, the "Sign in with Apple" feature started breaking with the following error

Your request could not be completed because of an error. Please try again later.

The javascript, the frontend html, and the Apple ID url are all identical, and there is no useful error in the console. What is going on?

There are 1 best solutions below

wonton On 23 November 2022 at 00:25

So it turns out that Django 4 added a new setting called SECURE_CROSS_ORIGIN_OPENER_POLICY which sets the Cross-Origin-Opener-Policy header to same-origin.

Adding the following line to my django settings module resolved the issue for me

SECURE_CROSS_ORIGIN_OPENER_POLICY = "same-origin-allow-popups"

I am not sure why they did this because the default browser value is unsafe-none, and the browser error console was not very helpful.