Sign in with Apple for CS-Cart, with hidden e-mail support and a client secret that never expires.
Tested on 2 buildsUpdated Nov 3, 2026Version 1.0.0CS-Cart, Multi-Vendor 4.17.2 – 4.21.x No core file edits
Built for
Sign in with Apple: Continue with Apple, Hide My Email support and a client secret that never expires1 of 7
What it does
Sign in with Apple adds a Continue with Apple button to the sign-in pop-up, sign-in page, checkout and registration page of CS-Cart and Multi-Vendor. Customers who use Hide My Email get an account on their private relay address, the name Apple sends once is saved, and the connected Apple ID shows in the profile. Vendors can sign in to the vendor panel. It is the Apple part of Social Login Pro as a separate add-on.
How it works
In your Apple Developer account create a Services ID with your domain and the redirect URI, and a Sign in with Apple key. On Customers, Apple sign-in enter the Services ID, Team ID, Key ID and the .p8 key and switch it on. Customers click the button, confirm with Face ID or their Apple ID password and come back signed in. Security: Apple's form post with state and nonce, verified ID tokens, browser binding, encrypted key.
Features
Continue with Apple button in the sign-in pop-up, sign-in page, checkout and registration page
Client secret signed with your .p8 key for each sign-in (ES256), so it never expires
Hide My Email relay addresses supported; the name sent on the first sign-in is saved
Verified Apple ID tokens (signature, issuer, audience, expiry, nonce)
Safe account matching: confirmed e-mail, or the account password asked once
Connected Apple ID in the customer profile, with disconnect
Vendor panel sign-in with Apple (Multi-Vendor)
Statistics: sign-ins, new accounts and failure reasons per day
Black, outline or icon-only button in three shapes
Moves up to Social Login Pro without reconnecting customers (keys and connections are imported)
Full page cache friendly; CS-Cart, CS-Cart Ultimate and Multi-Vendor, 4.17.2 to 4.21
What you get
Package
kv_apple_login-1.0.0.zip, installed through Add-ons → Manage add-ons
Updates & support
12 months included. Download new versions from your account and install them in Add-ons → Manage add-ons or the Upgrade Center.
License
1 production installation. Staging, dev and localhost are free and unlimited. The add-on keeps working after the update period ends. How licensing works
Compatibility
We list only the builds we install and test on. “Tested” means the full test plan was run on that build; “Supported” means the build is inside the supported range and uses the same hooks.
CS-Cart version and edition compatibility
CS-Cart version
CS-Cart
CS-Cart Ultimate
Multi-Vendor
Multi-Vendor Ultimate
4.22 and later
Testing next
Testing next
Testing next
Testing next
4.21.2
Supported
Supported
Supported
Supported
4.20.x
Supported
Supported
Supported
Supported
4.19.x
Supported
Supported
Supported
Supported
4.18.x
Supported
Supported
Supported
Supported
4.17.2
Supported
Supported
Supported
Supported
Before 4.17.2
Not supported
Not supported
Not supported
Not supported
Requirements
Core changes
None. Hooks and template overrides only
1.0.0
Nov 3, 2026
Latest
Added 4
Sign-in and registration with Apple in the sign-in pop-up, sign-in page, checkout and registration page.
Safe account matching (confirmed e-mail or the account password once), connected accounts in the profile, vendor panel sign-in (Multi-Vendor) and statistics.
Steps inactive while Social Login Pro is active (no double buttons); Social Login Pro imports the keys and connected accounts.
Domain-bound license check and self-healing upgrades.
Does it replace the built-in Social login?
It can run next to it. The built-in add-on has a Google, Facebook, X and Telegram button; this add-on adds Apple with verified tokens and safe account matching.
Can someone take over an existing account with a Apple profile?
No. An account is connected automatically only when Apple confirms the address; otherwise the account password is asked once.
I need more providers later.
Need more providers? Social Login Pro adds Google, Apple, Microsoft, Facebook, Amazon, LinkedIn, Discord, Yandex ID and OpenID Connect; the Login Pack adds two-factor sign-in, passkeys and phone codes. Both import the keys and connected accounts of this add-on. Install Social Login Pro, click Import on its Social sign-in page, then uninstall this add-on.
Does it work with full page cache?
Yes. The button markup is the same for every visitor.