spottedmahn
Reputation: 15981
Redirect URIs must all belong to the same domain
According to the Azure Portal:
Redirect URIs must all belong to the same domain
But I can define the following:
Why doesn't that break the rules of "the same domain"?
Upvotes: 5
Views: 3004
Answers (1)
Chris Padgett
Reputation: 14634
The redirect URIs must use the https: scheme with a single domain name.
The special case is use of the http: or https: scheme with the localhost host name.
This special case is allowed by the OpenID Connect Core specification for an authentication request.
Upvotes: 3
Related Questions
- Azure AD B2C: The redirect URI in the request, does not match the ones authorized for the OAuth client
- Redirect URL for Spring OAuth2 app on Azure with Active Directory: Invalid Redirect URI Parameter
- How to get Azure OIDC to respect my redirect URI?
- Microsoft Azure Directory oAuth redirect_uri not accepting state query parameter
- Azure B2C accepting different domains in Redirect URIs: Bug or Feature
- Azure web App .net core OpenID redirect_uri issue
- Azure AD B2C Microsoft Account redirect_uri failure
- Azure Ad - Redirect Uri hidden behind authorization
- REDIRECT_URI issue when creating new AD B2C APP
- redirect_uri containing query string does not match configured redirect URL's