Feature: Custom schemes should be valid as Callback URLs. Description: The URL validation does not allow all characters which are permitted in a custom scheme, it appears to only accept alphanumeric characters. Use-case: Mobile apps often use custom schemes, and it is essential that an OAuth redir…

Hey there! Thanks for creating this feedback card! Make sure to upvote it so that it gets as much attention from other community users as possible. We review those feedback cards on a monthly basis and will let you know once we have any updates on that front. Thank you!

Hi there. I haven’t heard anything back on this one. Did my point get lost that the validation for callbacks does not meet the URI specifications spelled out in RFC3986 ? The standard is clear about the valid characters, and Auth0 should correct its validation to comply.

It turns out I was led astray by the opaque error message from Auth0. It seems like the URI validation requires at least a root path for a custom scheme, which means three slashes. Two should be permitted, and this requirement means Expo’s makeRedirectUri requires the isTripleSlashed option, but a w…

Allowed Callback URLs validation is incorrect

Product Feedback

hellein May 11, 2023, 2:49pm 3

That’s fine, I guess, but this is clearly a bug.

May 2023 Community News

Topic		Replies	Views
Receiving Callback URL Mismatch Get Help login-experience , new-universal-login-experience	4	102	December 30, 2025
Why are wildcards not accepted for Callback URLs? Get Help configuration , application	3	47	May 22, 2026
Wildcard subdomain + path callback URLs marked invalid after recent dashboard UI changes Get Help configuration , application	3	51	May 27, 2026
"callbacks" must be a valid uri error for React Native app Archived react-native , react-native-auth0	4	5023	August 5, 2020
Defining non https url on "allowed callbacks" Archived	9	5921	September 7, 2020

Allowed Callback URLs validation is incorrect

Related topics