Dynamic Callback URLs with Wildcards

Knowledge Articles
, ,
1

Last Updated: Nov 25, 2024

Overview

This article clarifies whether Auth0 can handle dynamic callback URLs by dynamically changing the URL path. For instance:

https://<app_domain>.com/<something dynamic>

Applies To

  • Callback URLs
  • Wildcards

Solution

This is not supported, as wildcards are only allowed for subdomains. Wildcard placeholders in subdomains should not be used in production applications. Auth0 recommends URLs with the {organization_name} placeholder where relevant. See Subdomain URL Placeholders for additional details.

A workaround for this is to have a specific callback URL and then have your app redirect users to other endpoints, as explained in Allowed Callback URLs ending with a wildcard.