Oidc callback from systems with dynamic url

[jmls1]

we’re using gitpod to start our development environment. Each workspace started gets a different, randomized url

The app we’re developing uses Auth0 oidc as the authentication , however, the callbacks have to be a fixed url …

Has anyone had this problem before ? What changes can I make ?

[ty.frith]

Hello @jmls1 welcome the community!

@jmls1

The app we’re developing uses Auth0 oidc as the authentication , however, the callbacks have to be a fixed url

Unfortunately, as far as I’m aware there really isn’t a way to accommodate for multiple completely randomized urls, just subdomains as outlined here:

How do I set up a dynamic Allowed Callback URL?

Question: How do I set up a dynamic Allowed Callback URL? Answer: If your application has several protected routes that follow a pattern (e.g., https://example.com/users/:user_id), you may want to set up the application’s Allowed Callback URLs in a dynamic way that won’t require hard-coding a long list of URLs. Wildcards You can use a wildcard in the subdomain (as long as it follows the guidelines outlined in the documentation). However, to follow OAuth 2.0 Security Best Current Practice, you c…