Top Seller
The "invalid_client" error means Apple OAuth credentials are incorrect or the Redirect URI is not configured correctly.
🔧 How to Fix "invalid_client" in Apple Sign In
Step-by-Step Solution
1. Access Apple Developer Console
Go to developer.apple.com → Certificates, Identifiers & Profiles → Identifiers
2. Find your Service ID
Locate the Service ID used for Sign in with Apple (e.g., com.topsellermentor.signin)
3. Configure the Redirect URI
Add this EXACT URL to the Return URLs list:
4. Verify Client ID
The Client ID should be the Service ID (not the App ID)
💡 Example: com.topsellermentor.signin
5. Generate new Client Secret
In the Keys section, create a new key for Sign in with Apple and generate the Client Secret (JWT)
6. Update Secrets in Base44
Dashboard → Settings → Secrets → Update:
- • sso_client_id (your Service ID)
- • sso_client_secret (generated JWT)
- • sso_auth_endpoint
- • sso_token_endpoint
7. Test again
Save all changes and test login again
The Redirect URI must be EXACTLY the same as configured in Apple Developer Console. Any difference (http vs https, with/without trailing slash) causes the "invalid_client" error.
Temporary Solution
In the meantime, use Email/Password login on the Base44 login screen.
📋 Quick Checklist
- ✓ Service ID matches Client ID in Base44
- ✓ Redirect URI added in Apple Console
- ✓ Client Secret (JWT) is valid and not expired
- ✓ Sign in with Apple is enabled for the App ID