You can use the SP Dashboard to register redirect URIs. There are some restrictions regarding redirect URIs.

Supported schemes

We currently support the https:// scheme, and a custom redirect URI scheme. The custom URL scheme is always a reverse of your clientID.

Suppose your clientID is my.coolapp.com, the custom URL scheme would be: com.coolapp.my:/

Although we support the custom redirect URL scheme, we strongly advice is to register an application specific URL. Please refer to "Native apps" section below on how to do that.

Ip addresses cannot be used in redirect URLs, unless it's 127.0.0.1 or [::1]

Localhost

We discourage the use of localhost redirect URLs. Only in cases when you are developing, or when you use a desktop app, we support localhost redirect URLs. Since this traffic never leaves the host machine, the http:// scheme is allowed here.
You may use http://127.0.0.1 or the ipv6 equivalent, http://[::1]. Port numbers are allowed too. On production, you should only use this for desktop apps.

Native apps

On mobile apps, we advise you to register application specific URLs for your redirect URL (in stead of using localhost, or a custom scheme). For Android, you can check https://developer.android.com/studio/write/app-link-indexing. For Apple, check their documentation on https://developer.apple.com/documentation/xcode/allowing_apps_and_websites_to_link_to_your_content

For more information on the current best practices on native apps, please refer to rfc8252






  • No labels