Restrictions on redirect URIs?

dan · 13 Jul 2020, 16:56

What are the exact restrictions we have regarding redirect_uris?

For instance, can we have subdomains? or go to a specific page (https://example.com/login/otherpage.html)?

dan · 13 Jul 2020, 16:57

As long as it is a valid URI, it is allowed.

davidmw · 27 Feb 2023, 07:45

@dan Any support for wildcards? We've got a query parameter (subscription key) needed by our backend and it would be great to not touch all the redirects for this

dan · 27 Feb 2023, 22:59

Support for wildcards in redirect URIs just landed in 1.43.

We don't recommend using these because they are against the OAuth specification (you could look at using the state parameter instead).

But we listened to the community feedback on this issue: https://github.com/FusionAuth/fusionauth-issues/issues/437 and implemented it.

It is still being documented, but you can read about it here: https://fusionauth.io/blog/2023/02/16/announcing-fusionauth-1-43#support-for-wildcards-in-redirect-urls

Hope that helps, @davidmw !