web / security / OAuth

OAuth Redirect URI Review Guide

Review exact matching plus query, path and host boundaries with synthetic cases. No auth request or redirect is performed.

Redirect URI matching boundaries

Review registered and requested URI comparison points using exact matching as the baseline.

CaseResultWhat to check
Choose a case to display it.

Why real auth is not used

No OAuth request, redirect, external request, storage, analytics or upload is performed.

A synthetic result does not guarantee provider registration. Verify the provider's exact matching rule separately.