Skip to content
WebViewGold Vibe Coding to App Store
English
Get WebViewGold

Bolt + deep links

Deep links and Universal Links for your Bolt app

A user taps the magic link from Supabase Auth (email, magic links, Google, GitHub) via the built-in Supabase integration in their email and lands in Safari, logged in on the web but not in the app. Universal Links and App Links fix that: https links to your domain open the Bolt app directly. Here is the complete setup, plus custom scheme links for QR codes and other apps.

From $109 one-time per platform, or let our team do it all from $698.

  • Approval guarantee – or money back within 14 days
  • No coding needed
  • One-time payment, free updates
  • 24/7 human support
  • Made in Germany since 2014 · ISO 27001

Two mechanisms

Universal Links (iOS) and App Links (Android)

Normal https links to your domain open the app when installed and the website when not. Requires two files on your domain and a setting in WebViewGold. The standard for magic links, password resets, shared content and marketing links.

Custom scheme deep links

Links like yourapp://https://app.yourdomain.com/path open the app from other apps or QR codes (CUSTOM_DEEPLINK_SCHEME on Android, URL scheme in the Xcode project). No domain files needed, but they do nothing when the app is not installed.

Prompt for Bolt

Paste this into Bolt to implement the web-app side. Review the result, publish, then test inside the WebViewGold app.

Prompt to paste into Bolt
Set this project up for Universal Links and App Links. Create public/.well-known/apple-app-site-association (no file extension) with an applinks block for appID "TEAMID.com.example.app" and paths ["*"], and public/.well-known/assetlinks.json for package com.example.app with the fingerprint placeholder FINGERPRINT. Add public/_headers with the path /.well-known/apple-app-site-association followed by an indented line Content-Type: application/json, so Netlify serves it as JSON. Add a route /auth/confirm that reads token_hash and type from the URL, calls supabase.auth.verifyOtp and redirects to the app home. Finally print the email-template snippet for Supabase magic links so they point to /auth/confirm on our domain.

Great work! Never coded anything but managed to work with this. Easy and fast! Also with great help from the creators!

Lucas Dubois · CodeCanyon

Set up Universal Links and App Links for a Bolt app

Needs your custom domain and the app IDs from both stores.

  1. Host the Apple file

    Put /.well-known/apple-app-site-association (JSON, no file extension, served over HTTPS with status 200) in the public folder of your Bolt project with your Team ID and bundle ID.

  2. Host the Android file

    Put /.well-known/assetlinks.json with your package name and the SHA-256 fingerprint of the signing key (from the Play Console under App signing).

  3. Enable the feature in WebViewGold

    iOS: add the Associated Domains capability with applinks:yourdomain.com and enable the Universal Links option in Config.swift. Android: set IS_DEEP_LINKING_ENABLED in Config.java and add your domain to the intent filter in AndroidManifest.xml.

  4. Point your auth redirect URLs to the domain

    In Supabase Auth (email, magic links, Google, GitHub) via the built-in Supabase integration: Site URL and redirect URLs = https://app.yourdomain.com/…. Magic links then carry your domain and open in the app.

  5. Test on real devices

    Send yourself a magic link, tap it in Mail and Gmail. Simulators do not reliably test Universal Links. Also test a shared link from Messages and WhatsApp.

Common pitfalls

  • The association file is served with a redirect or the wrong content type: it must be served directly over HTTPS with status 200 and application/json.
  • The email provider wraps links in a tracking domain: disable click tracking for auth emails or add that domain too.
  • www vs. non-www: register both in the Associated Domains capability.
  • Android App Links only verify when the fingerprint matches the key Google uses to sign the published app (Play App Signing key, not your upload key).

Frequently asked questions

Can I skip this if my Bolt app only uses email/password login?

Yes, for login. Password reset emails still contain a link; without Universal Links it opens the website, which works but leaves the user outside the app.

Do deep links need a store update?

The first setup does (new capability and manifest entries). Changing which paths open the app later is done in the association files on your domain without a store update.

Do links to my domain always open the app?

When the app is installed and the file verifies, yes. iOS lets users opt out per domain by long-pressing a link and choosing Safari.

Three ways to get your app into the stores

Same result, different amount of work on your side. All three come with the approval guarantee and 24/7 human support.

Do it yourself

$109 per platform, one-time

The WebViewGold license: a finished Xcode or Android Studio project. Paste your URL, set name and icon, switch on features, build and submit. Free updates forever.

See plans on the main page

Cloud Builder

$349 per license, one-time add-on

No Mac, no Xcode, no Android Studio: configure in the browser, we build both apps in the cloud and hand them to App Store Connect and the Play Console.

How the Cloud Builder works Try the free demo

Full Service

$698 per platform $798

Send us your URL and icon. Our team configures, builds and delivers your app within 72 hours, white-label, with source projects. Both platforms for $1,158.

Full Service details Powered by WeSetupYourWebViewApp

Winter Sale prices valid until December 31, 2026.

Ready to ship your Bolt app?

App Store & Google Play approval guarantee – or your money back within 14 days

Rather hand it over? Full Service: we configure, build and deliver within 72 hours, from $698 per platform. Questions? Chat with us 24/7.

Refunds are granted under the conditions listed in our FAQ: a non-content rejection by Apple and/or Google, claimed within 14 days after purchase.