What is the redirect URL?
With an Oauth2 login, a user is sent back to the original application after logging in.
This is called the "redirectURL".
The identity provider also checks this URL. This prevents an application from being used from another location. A security measure.
The redirect URL is set at the identity provider and is part of the "app".
Most providers allow you to specify multiple URLs. In most cases, only secure URLs (https) may be used.
What are the desired URLs?
The basic URLs are the login URLs. Optional are URLs that are included in the process and where authentication takes place "on the fly". In other words, when authentication is required.
- Customer login pages: https://<yourdomain>/login
- Administration panel login: https://<yourdomain>/adminlogin
- Optional: Registration https://<yourdomain>/?mod=registration
- Optional: When making a reservation, log in to checkout https://<yourdomain>/?mod=checkout
- Optional: For content pages where login is required: the link to the content page.
The optional URLs are only relevant in specific cases.
Not providing the URLs often results in cryptic error messages from the provider or sometimes also a clear message that the redirect url is invalid.
It is always possible to change the urls later.
