invalid_redirect_uri
redirect_uri is not an exact match of a registered callback URI.
On this page
HTTP 400redirectoauthapitypescriptwebjava
Code: invalid_redirect_uri · Shape: oauth
Meaning
redirect_uri is not an exact match of a registered callback URI.
Likely causes
- Trailing slash mismatch
- http vs https
- Wrong port / localhost vs 127.0.0.1
- Path mismatch
- Production domain not registered
- Query string differences
How to diagnose
- Compare the exact string sent as redirect_uri to project_callback_url and hosted_redirect_uris[]
- KEYRA uses exact string equality — no path normalization
How to fix
- Register the exact callback URI in the Developer Portal
- Use the identical string in start and token exchange
Retry behavior
Safe to retry after aligning the registered URI.
Related
API: POST /oauth/authorize/init, POST /verify/start, POST /oauth/token
SDK: verifyWithRedirect(), createKeyraAuth(), createVerification()
Troubleshooting: popup-redirect, production
Guides: Redirect flow, OAuth Security
