# Is wildcard entry allowed in URL pathname

**URL:** <https://community.auth0.com/t/is-wildcard-entry-allowed-in-url-pathname/186329>\
**Category:** Get Help\
**Tags:** signup-prompt-new-experience, login-experience\
**Created:** [May 5, 2025, 7:04pm UTC](https://community.auth0.com/t/is-wildcard-entry-allowed-in-url-pathname/186329 "2025-05-05T19:04:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rajkums](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rajkums/32/70866_2.png) [@rajkums](https://community.auth0.com/u/rajkums)\
**Post date:** [May 5, 2025, 7:04pm UTC](https://community.auth0.com/t/is-wildcard-entry-allowed-in-url-pathname/186329/1 "2025-05-05T19:04:02Z")

</div>

Hello everyone,

In my project, we don’t host anything directly on `www.example.com`. Instead, our hosting structure is like `www.example.com/en/dashboard`. I’ve added callback URLs to accommodate this setup, but I want to simplify the callback URL format to something like `www.example.com/*/auth/callback`. Specifically, I want to use a wildcard for the language (`en`) or pathname. Is this allowed? I haven’t found any relevant information on this topic.

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [May 5, 2025, 8:20pm UTC](https://community.auth0.com/t/is-wildcard-entry-allowed-in-url-pathname/186329/3 "2025-05-05T20:20:10Z")

</div>

Hi @rajkums,

Welcome to the Auth0 Community!

Unfortunately, using wildcards in routes for your Allowed Callback URLs is not allowed because it can make your application vulnerable to attacks. The Allowed Callback URLs must be exact URLs. (Reference: [Application Settings - Callback URLs](https://auth0.com/docs/get-started/applications/application-settings#:~:text=Do%20not%20use%20wildcard%20placeholders%20or%20localhost%20URLs%20in%20your%20application%20callbacks%20or%20allowed%20origins%20fields.))

One option you might try is to have a callback URL for each language specific path.  
However, please note that there is a limit of 100 URLs for performance reasons, as mentioned in our [Increase allowed callback urls entity limit](https://community.auth0.com/t/increase-allowed-callback-urls-entity-limit/99189) knowledge article.

Let me know if you have any further questions.

Thanks,  
Rueben

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [May 19, 2025, 8:20pm UTC](https://community.auth0.com/t/is-wildcard-entry-allowed-in-url-pathname/186329/4 "2025-05-19T20:20:14Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.