Programmatic Redirect Domain Whitelist

Summary

The Programmatic Redirect Domain Whitelist is used to restrict the allowed redirect URLs when using programmatic login.

Note

Whitelisted domains must match the redirect URL exactly; otherwise, the domain will be rejected.

For example, whitelisting example.com will only accept a redirect URL that matches example.com.

dev.example.com will be rejected, as the hostname does not exactly match example.com.

How to configure

Core

Config file keys	Environment variables	Type	Usage	Default
programmatic_redirect_domain_whitelist	PROGRAMMATIC_REDIRECT_DOMAIN_WHITELIST	string (array)	optional	localhost

Enterprise

programmatic_redirect_domain_whitelist is a bootstrap configuration setting and is not configurable in the Console.

Kubernetes

Kubernetes does not support Programmatic Redirect Domain Whitelist

Examples

# config file key
programmatic_redirect_domain_whitelist:
  - localhost
  - redirect-uri.com