From ebe5caeff4dae1cd489959280f48c35e975d8655 Mon Sep 17 00:00:00 2001 From: Tolgahan Arikan Date: Tue, 6 Jan 2026 15:13:36 +0300 Subject: [PATCH 1/2] Fix apple auth scope --- packages/wallet/wdk/src/sequence/handlers/authcode.ts | 3 ++- packages/wallet/wdk/test/authcode.test.ts | 1 + 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/wallet/wdk/src/sequence/handlers/authcode.ts b/packages/wallet/wdk/src/sequence/handlers/authcode.ts index f73f9ec5d..13c035c0f 100644 --- a/packages/wallet/wdk/src/sequence/handlers/authcode.ts +++ b/packages/wallet/wdk/src/sequence/handlers/authcode.ts @@ -45,11 +45,12 @@ export class AuthCodeHandler extends IdentityHandler implements Handler { isSignUp, }) + const scope = this.signupKind === 'apple' ? 'name email' : 'openid profile email' const searchParams = new URLSearchParams({ client_id: this.audience, redirect_uri: this.redirectUri, response_type: 'code', - scope: 'openid profile email', + scope, state, }) diff --git a/packages/wallet/wdk/test/authcode.test.ts b/packages/wallet/wdk/test/authcode.test.ts index 4874e475b..8428255f2 100644 --- a/packages/wallet/wdk/test/authcode.test.ts +++ b/packages/wallet/wdk/test/authcode.test.ts @@ -311,6 +311,7 @@ describe('AuthCodeHandler', () => { expect(result).toContain('https://appleid.apple.com/auth/authorize?') expect(result).toContain('client_id=apple-client-id') + expect(result).toContain('scope=name+email') }) it('Should create commitment without signer', async () => { From f126063fd10fc23dff039bb210e0abfd75eee0b6 Mon Sep 17 00:00:00 2001 From: Tolgahan Arikan Date: Tue, 6 Jan 2026 15:23:27 +0300 Subject: [PATCH 2/2] Fix Apple auth scope test --- packages/wallet/wdk/test/authcode.test.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/packages/wallet/wdk/test/authcode.test.ts b/packages/wallet/wdk/test/authcode.test.ts index 8428255f2..801547b11 100644 --- a/packages/wallet/wdk/test/authcode.test.ts +++ b/packages/wallet/wdk/test/authcode.test.ts @@ -311,7 +311,8 @@ describe('AuthCodeHandler', () => { expect(result).toContain('https://appleid.apple.com/auth/authorize?') expect(result).toContain('client_id=apple-client-id') - expect(result).toContain('scope=name+email') + const resultUrl = new URL(result) + expect(resultUrl.searchParams.get('scope')).toBe('name email') }) it('Should create commitment without signer', async () => {