Defining non https url on "allowed callbacks"

[guy1812]

Hi,
I am using mobile app to open the /authorise universal login page.
My callback URL is my mobile app scheme: “kbp://”
this kind of URL is not allowed on the “allowed callback list”.
What can I do?

[andy.carter]

Hey @guy1812,

Are you just trying to enter “kbp://” in the list without anything else?

If so, this won’t work as you’re just trying to add the scheme rather than the full callback url - you would need to enter “kbp://CALLBACK_URL” where CALLBACK_URL is the callback url for your app.

[guy1812]

But my redirect url on localhost is “exp://127.0.0.1:19000” (Expo client),
On production (app store mobile app) its kbp:// (without additional URL)…
I tried adding “kbp://CALLBACK_URL” to the allowed list but it didn’t help:

[guy1812]

alternatively - is it possible to implement login without the universal login but still based on cookies?

[guy1812]

Trying again to maybe find answer to my questions here

[fcalise]

hey @guy1812, I think I figured it out. It was really tricky reading the documentation, but I did just get it to work without the popup on a sideloaded APK for Android. I still need to push OTA to test iOS but here’s what I did…

https://auth0.com/docs/quickstart/native/react-native#configure-callback-urls

Multiple callbacks on Android

Is it possible to have two activities each one with a different callback? I tried this on the Android Manifest: <activity android:name=".LoginActivity" android:launchMode="singleTask"> <intent-filter> <action android:name="android.intent.action.VIEW"/> <category android:name="android.intent.category.DEFAULT"/> <category android:name="android.intent.category.BROWSABLE"/> <data android:host="@string/auth0_domain" android:pathPref…

If your app.json contains the scheme “myapp” and bundle for the apps are “com.myname.myapp” then the URLs I entered in Auth0 were the following:

myapp://xyz.us.auth0.com/android/com.myname.myapp/callback,
myapp://xyz.us.auth0.com/ios/com.myname.myapp/callback,

Then in Auth0 Callback URLs I added those.

Now for running in Expo, I still use the proxy and AuthSession.makeRedirectUri (for ease of developer use) and receive the popup. But if I’m deploying to a remote channel such as production, I set the proxy to false and force the redirectUri to be one of the above URLs based on platform. I’m not sure if that platform specific URL is exactly necessary, but at first test it worked.

Hope this helps, let me know if you need more details.

[fcalise]

Actually it seems to just change the pop up from “expo.io” to “auth0.com” is requesting access to data etc.

[konrad.sopala]

Thanks for sharing that with the rest of community @fcalise!

[guy1812]

@fcalise thank you for that info. I will try this.
So now you do not see that expo.proxy.io redirection page? The popup is less of an issue (for me).