Go to developer

invalid_redirect_uri

redirect_uri is not an exact match of a registered callback URI.

On this page
HTTP 400redirectoauthapitypescriptwebjava

Code: invalid_redirect_uri · Shape: oauth

Meaning

redirect_uri is not an exact match of a registered callback URI.

Likely causes

  1. Trailing slash mismatch
  2. http vs https
  3. Wrong port / localhost vs 127.0.0.1
  4. Path mismatch
  5. Production domain not registered
  6. Query string differences

How to diagnose

  • Compare the exact string sent as redirect_uri to project_callback_url and hosted_redirect_uris[]
  • KEYRA uses exact string equality — no path normalization

How to fix

  • Register the exact callback URI in the Developer Portal
  • Use the identical string in start and token exchange

Retry behavior

Safe to retry after aligning the registered URI.

API: POST /oauth/authorize/init, POST /verify/start, POST /oauth/token

SDK: verifyWithRedirect(), createKeyraAuth(), createVerification()

Troubleshooting: popup-redirect, production

Guides: Redirect flow, OAuth Security