Don't show valid logout URLs

When calling “/logout” and giving an invalid “returnTo” parameter, the valid “returnTo” URLs (empty in this case) are show in the error message (not only in the HTML, but also as a URL parameter for the error page):

The “returnTo” querystring parameter “https://xxx” is not defined as a valid URL in “Allowed Logout URLs”. Valid values are: (The list is empty). To add a new URL, please do it here: https://manage.auth0.com/#/applications

Is there a way to turn the display of the valid “returnTo” URLs off?

This FAQ explains the cause and solution for the below error, so link it to this topic.

invalid_request: The "returnTo" querystring parameter "[https://YOUR_URL"](https://YOUR_URL)" is not defined as a valid URL in "Allowed Logout URLs"

1 Like