A user taps the magic link from Supabase Auth (email, magic links, Google, GitHub) via the built-in Supabase integration in their email and lands in Safari, logged in on the web but not in the app. Universal Links and App Links fix that: https links to your domain open the Bolt app directly. Here is the complete setup, plus custom scheme links for QR codes and other apps.
From $109 one-time per platform, or let our team do it all from $698.
Approval guarantee – or money back within 14 days
No coding needed
One-time payment, free updates
24/7 human support
Made in Germany since 2014 · ISO 27001
9:41
BBolt
Deep linksNow live in your pocket
App Store · Google Play Approved
Two mechanisms
Universal Links (iOS) and App Links (Android)
Normal https links to your domain open the app when installed and the website when not. Requires two files on your domain and a setting in WebViewGold. The standard for magic links, password resets, shared content and marketing links.
Custom scheme deep links
Links like yourapp://https://app.yourdomain.com/path open the app from other apps or QR codes (CUSTOM_DEEPLINK_SCHEME on Android, URL scheme in the Xcode project). No domain files needed, but they do nothing when the app is not installed.
Prompt for Bolt
Paste this into Bolt to implement the web-app side. Review the result, publish, then test inside the WebViewGold app.
Prompt to paste into Bolt
Set this project up for Universal Links and App Links. Create public/.well-known/apple-app-site-association (no file extension) with an applinks block for appID "TEAMID.com.example.app" and paths ["*"], and public/.well-known/assetlinks.json for package com.example.app with the fingerprint placeholder FINGERPRINT. Add public/_headers with the path /.well-known/apple-app-site-association followed by an indented line Content-Type: application/json, so Netlify serves it as JSON. Add a route /auth/confirm that reads token_hash and type from the URL, calls supabase.auth.verifyOtp and redirects to the app home. Finally print the email-template snippet for Supabase magic links so they point to /auth/confirm on our domain.
Great work! Never coded anything but managed to work with this. Easy and fast! Also with great help from the creators!
Set up Universal Links and App Links for a Bolt app
Needs your custom domain and the app IDs from both stores.
Host the Apple file
Put /.well-known/apple-app-site-association (JSON, no file extension, served over HTTPS with status 200) in the public folder of your Bolt project with your Team ID and bundle ID.
Host the Android file
Put /.well-known/assetlinks.json with your package name and the SHA-256 fingerprint of the signing key (from the Play Console under App signing).
Enable the feature in WebViewGold
iOS: add the Associated Domains capability with applinks:yourdomain.com and enable the Universal Links option in Config.swift. Android: set IS_DEEP_LINKING_ENABLED in Config.java and add your domain to the intent filter in AndroidManifest.xml.
Point your auth redirect URLs to the domain
In Supabase Auth (email, magic links, Google, GitHub) via the built-in Supabase integration: Site URL and redirect URLs = https://app.yourdomain.com/…. Magic links then carry your domain and open in the app.
Test on real devices
Send yourself a magic link, tap it in Mail and Gmail. Simulators do not reliably test Universal Links. Also test a shared link from Messages and WhatsApp.
Common pitfalls
The association file is served with a redirect or the wrong content type: it must be served directly over HTTPS with status 200 and application/json.
The email provider wraps links in a tracking domain: disable click tracking for auth emails or add that domain too.
www vs. non-www: register both in the Associated Domains capability.
Android App Links only verify when the fingerprint matches the key Google uses to sign the published app (Play App Signing key, not your upload key).
Frequently asked questions
Can I skip this if my Bolt app only uses email/password login?
Yes, for login. Password reset emails still contain a link; without Universal Links it opens the website, which works but leaves the user outside the app.
Do deep links need a store update?
The first setup does (new capability and manifest entries). Changing which paths open the app later is done in the association files on your domain without a store update.
Do links to my domain always open the app?
When the app is installed and the file verifies, yes. iOS lets users opt out per domain by long-pressing a link and choosing Safari.
Three ways to get your app into the stores
Same result, different amount of work on your side. All three come with the approval guarantee and 24/7 human support.
Do it yourself
$109 per platform, one-time
The WebViewGold license: a finished Xcode or Android Studio project. Paste your URL, set name and icon, switch on features, build and submit. Free updates forever.
No Mac, no Xcode, no Android Studio: configure in the browser, we build both apps in the cloud and hand them to App Store Connect and the Play Console.
Send us your URL and icon. Our team configures, builds and delivers your app within 72 hours, white-label, with source projects. Both platforms for $1,158.