Timeline for "Invalid redirect_uri" on OauthKickoffUrl of Custom AuthProvider
Current License: CC BY-SA 4.0
18 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 17, 2022 at 19:21 | vote | accept | Robert Sösemann | ||
| Mar 17, 2022 at 19:21 | answer | added | Robert Sösemann | timeline score: 0 | |
| Mar 11, 2022 at 17:43 | comment | added | Felix van Hove | @RobertSösemann Wow, cool, have you got it working? Maybe you want to post this as an answer - would be interesting for me too! | |
| Mar 11, 2022 at 16:33 | comment | added | Robert Sösemann | @FelixvanHove: MyDomains are subdomains and wildcards are allowed in Redirect URI registrations auth0.com/docs/get-started/applications/… | |
| Mar 11, 2022 at 13:54 | comment | added | Felix van Hove | @RobertSösemann, I would need to look into this myself, but I belive the Salesforce documentation you thought of (OpenID Connect Dynamic Client Registration) is pertinent. | |
| Mar 11, 2022 at 12:15 | comment | added | Robert Sösemann | @FelixvanHove Got it. How would an external API provider register such URLs when he builds an AppExchange app that needs to work for unknown mydomains? Can you point me to any documentation describing that? And how does this registering technically work? | |
| Mar 11, 2022 at 12:04 | comment | added | Felix van Hove | If the uri is not registered, anyone between you and the authorization server could replace it with another uri - and off you go! Or not?! | |
| Mar 11, 2022 at 11:57 | comment | added | Robert Sösemann | @FelixvanHove Don't worry, you help a lot. Are you saying the API Provider needs to know the redirect URI in advance? How would that work? Many different Salesforce orgs with changing mydomains will use this oauth flow. Do I need a Connect App? This made me think that help.salesforce.com/s/… | |
| Mar 11, 2022 at 11:50 | comment | added | Felix van Hove | Again worried to ask something stupid, - have you properly registered your redirect uri on the authorization server? | |
| Mar 11, 2022 at 11:25 | history | edited | Robert Sösemann | CC BY-SA 4.0 |
deleted 102 characters in body
|
| Mar 11, 2022 at 11:10 | comment | added | Robert Sösemann | @FelixvanHove why not? It is the Oauth Kickoff URL that I create according to this other question: salesforce.stackexchange.com/questions/268763 How do you think it should look like instead. Maybe you are right and I am doing it wrong ;-) | |
| Mar 11, 2022 at 10:07 | comment | added | Felix van Hove | The header that you've provided is even better. But would you not (based on your code) expect "services/auth/xds" to appear in the redirect_uri? (Sorry, if this question is not advancing the solution.) | |
| Mar 11, 2022 at 9:54 | comment | added | Robert Sösemann | @FelixvanHove I added it. | |
| Mar 11, 2022 at 9:54 | history | edited | Robert Sösemann | CC BY-SA 4.0 |
added 301 characters in body
|
| Mar 10, 2022 at 21:13 | comment | added | Felix van Hove | Could you add what System.debug says about your redirectUrl variable (with all the confidential stuff removed)? | |
| Mar 10, 2022 at 17:58 | comment | added | Robert Sösemann | No Stacktrace, no line number. The Oauth Page of the API Provider is showing a page with the error message. Nothing fails inside Salesforce. | |
| Mar 10, 2022 at 17:10 | comment | added | metasync | Can you please post stacktrace to show the line num of the error? | |
| Mar 10, 2022 at 15:39 | history | asked | Robert Sösemann | CC BY-SA 4.0 |