# Callback URL mismatch. "is not in the list of allowed callback URLs"

**URL:** <https://community.auth0.com/t/callback-url-mismatch-is-not-in-the-list-of-allowed-callback-urls/78799>\
**Category:** Get Help\
**Tags:** auth0\
**Created:** [February 23, 2022, 5:35pm UTC](https://community.auth0.com/t/callback-url-mismatch-is-not-in-the-list-of-allowed-callback-urls/78799 "2022-02-23T17:35:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![valldav90](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/valldav90/32/33944_2.png) [@valldav90](https://community.auth0.com/u/valldav90)\
**Post date:** [February 23, 2022, 5:35pm UTC](https://community.auth0.com/t/callback-url-mismatch-is-not-in-the-list-of-allowed-callback-urls/78799/1 "2022-02-23T17:35:25Z")

</div>

Good afternoon!

Please if you could help me.

I created a new application developed in Node js but when authenticating, I get the following error:

Callback URL mismatch. [http://localhost:3000/api/auth/callback](http://localhost:3000/api/auth/callback) is not in the list of allowed callback URLs

{  
“date”: “2022-02-23T17:10:54.772Z”,  
“type”: “f”,  
“description”: “Callback URL mismatch. [http://localhost:3000/api/auth/callback](http://localhost:3000/api/auth/callback) is not in the list of allowed callback URLs”,  
“connection\_id”: “”,  
“ip”: “186.69.XX.XXX”,  
“user\_agent”: “Chrome 98.0.4758 / Windows 10.0.0”,  
“details”: {  
“body”: {},  
“qs”: {  
“client\_id”: “XXXXXXXXXXXXXXXXXx”,  
“scope”: “openid profile email user\_metadata app\_metadata”,  
“response\_type”: “code”,  
“redirect\_uri”: “[http://localhost:3000/api/auth/callback](http://localhost:3000/api/auth/callback)”,  
“nonce”: “XXXXXXXXXXXXXXXXXXXXXXXXXXXXX”,  
“state”: “XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXx”,  
“code\_challenge”: “kGxMYLQ9Bsoa2bbXXX2bumBqNFNzEnLKAs9gXXMozXX”,  
“code\_challenge\_method”: “S256”  
},  
“error”: {  
“message”: “Callback URL mismatch. [http://localhost:3000/api/auth/callback](http://localhost:3000/api/auth/callback) is not in the list of allowed callback URLs”,  
“oauthError”: “Callback URL mismatch. [http://localhost:3000/api/auth/callback](http://localhost:3000/api/auth/callback) is not in the list of allowed callback URLs. Please go to ‘[https://manage.auth0.com/#/applications/osG0pV2rlZXXXXyXPAZxXXXXXXXXXX/settings](https://manage.auth0.com/#/applications/osG0pV2rlZXXXXyXPAZxXXXXXXXXXX/settings)’ and make sure you are sending the same callback url from your application.”,  
“payload”: {  
“message”: “Callback URL mismatch. [http://localhost:3000/api/auth/callback](http://localhost:3000/api/auth/callback) is not in the list of allowed callback URLs”,  
“code”: “unauthorized\_client”,  
“status”: 403,  
“name”: “CallbackMismatchError”,  
“authorized”: [  
“[http://localhost:3000](http://localhost:3000)”  
],  
“attempt”: “[http://localhost:3000/api/auth/callback](http://localhost:3000/api/auth/callback)”,  
“client”: {  
“clientID”: “XXXXXXXXXXXXXXXX”  
},  
“log\_url”: “[https://manage.auth0.com/#/logs/](https://manage.auth0.com/#/logs/)”  
},  
“type”: “callback-url-mismatch”  
},  
“session\_id”: “vLQxSeKxbC4VOJEXXXXnrJVXXXXXX”  
},  
“hostname”: “[XXXXXcsu.us.auth0.com](http://XXXXXcsu.us.auth0.com)”,  
“log\_id”: “90020220223171057240XXX79274349976793359937548845074”,  
“\_id”: “90020220223XXX260605279274349976793359937548845074”,  
“isMobile”: false  
}

 ![error](https://global.discourse-cdn.com/auth0/original/3X/7/3/7301f11985cb5ec2cc378d97bcdcb6f789621f20.png)

In Auth0, I have it configured like this:

 ![error2](https://global.discourse-cdn.com/auth0/original/3X/2/1/2182017213122e708ab89e102fee17a0959e63e1.png)

and in the file .env.local

AUTH0\_SECRET=‘XXXXXXXXXXXXXXXXXXX’  
AUTH0\_BASE\_URL=‘[http://localhost:3000](http://localhost:3000)’  
AUTH0\_ISSUER\_BASE\_URL=‘[MYauth0.us.auth0.com](http://MYauth0.us.auth0.com)’  
AUTH0\_CLIENT\_ID=‘Client ID Auth0’  
AUTH0\_CLIENT\_SECRET=‘CLiente Secret Auth0’  
AUTH0\_SCOPE=‘openid profile email user\_metadata app\_metadata’  
NEXT\_PUBLIC\_AUTH0\_USER\_ROLE\_URI=‘[http://localhost:3000/role](http://localhost:3000/role)’  
NEXT\_PUBLIC\_AUTH0\_USER\_METADATA\_URI=‘[http://localhost:3000/user\_metadata](http://localhost:3000/user_metadata)’  
NEXT\_PUBLIC\_AUTH0\_APP\_METADATA\_URI=‘[http://localhost:3000/app\_metadata](http://localhost:3000/app_metadata)’

I don’t know what I’m missing. If you could help me I would really appreciate it.

David

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [February 23, 2022, 9:10pm UTC](https://community.auth0.com/t/callback-url-mismatch-is-not-in-the-list-of-allowed-callback-urls/78799/3 "2022-02-23T21:10:16Z")

</div>

Hey there @valldav90 welcome to the community!

You’ll need to make sure you have the _exact_ callback url defined in your application settings - That is, you’ll need to add `http://localhost:3000/api/auth/callback` here 👇

> [@valldav90](#):
>
> ![error2](https://global.discourse-cdn.com/auth0/original/3X/2/1/2182017213122e708ab89e102fee17a0959e63e1.png)
> 
> error21144×642 78.8 KB

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 10, 2022, 9:11pm UTC](https://community.auth0.com/t/callback-url-mismatch-is-not-in-the-list-of-allowed-callback-urls/78799/4 "2022-03-10T21:11:12Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.