Restrictions on redirect URIs?

dan

What are the exact restrictions we have regarding redirect_uris?

For instance, can we have subdomains? or go to a specific page (https://example.com/login/otherpage.html)?

dan

As long as it is a valid URI, it is allowed.

davidmw

@dan Any support for wildcards? We've got a query parameter (subscription key) needed by our backend and it would be great to not touch all the redirects for this

dan

Support for wildcards in redirect URIs just landed in 1.43.

We don't recommend using these because they are against the OAuth specification (you could look at using the state parameter instead).

But we listened to the community feedback on this issue: https://github.com/FusionAuth/fusionauth-issues/issues/437 and implemented it.

It is still being documented, but you can read about it here: https://fusionauth.io/blog/2023/02/16/announcing-fusionauth-1-43#support-for-wildcards-in-redirect-urls

Hope that helps, @davidmw !