Manage redirect URIs

Configure

Select an application in Applications, open Credentials and edit the OAuth client's redirect URIs. URIs belong to clients, not an application-wide default. Register a callback you control and follow the form's validation rules.

Use the same complete URI for authorization and token exchange. Scheme, host, port, path and query must satisfy the registered contract. Use HTTPS in production and do not assume wildcard matching or fallback. Registration does not replace state validation, PKCE or secure sessions.

See user authorization.