drupal 11.3.7 — Update released for Drupal core (11.3.7)! drupal 11.2.11 — Update released for Drupal core (11.2.11)! drupal 10.6.7 — Update released for Drupal core (10.6.7)! drupal 10.5.9 — Update released for Drupal core (10.5.9)! cms 2.1.1 — Update released for Drupal core (2.1.1)! drupal 11.3.6 — Update released for Drupal core (11.3.6)! drupal 10.6.6 — Update released for Drupal core (10.6.6)! cms 2.1.0 — Update released for Drupal core (2.1.0)! bootstrap 8.x-3.40 — Minor update available for theme bootstrap (8.x-3.40). menu_link_attributes 8.x-1.7 — Minor update available for module menu_link_attributes (8.x-1.7). eca 3.1.1 — Minor update available for module eca (3.1.1). layout_paragraphs 2.1.3 — Minor update available for module layout_paragraphs (2.1.3). ai 1.3.3 — Minor update available for module ai (1.3.3). ai 1.2.14 — Minor update available for module ai (1.2.14). node_revision_delete 2.0.3 — Minor update available for module node_revision_delete (2.0.3). moderated_content_bulk_publish 2.0.52 — Minor update available for module moderated_content_bulk_publish (2.0.52). klaro 3.0.10 — Minor update available for module klaro (3.0.10). klaro 3.0.9 — Minor update available for module klaro (3.0.9). layout_paragraphs 2.1.2 — Minor update available for module layout_paragraphs (2.1.2). geofield_map 11.1.8 — Minor update available for module geofield_map (11.1.8).

← All modules

simple_oauth_redirect_uri_wildcard

6 sites Security covered

View on drupal.org

Extends the Simple OAuth module to allow for subdomain wildcards in redirect URIs.

WARNING: Use of this module violates Section 3.1.2 of RFC-6749 (OAuth 2.0 Specification) which requires the use of absolute redirect URIs!

However there are valid practical reasons to use a wildcard in a subdomain (e.g. Vercel and other hosting platforms are generating unique subdomains for each git commit).
Additionally big auth providers, such as Auth0 and Okta also provide this functionality.

Ultimately it comes down to your responsibility as the developer to carefully govern the use of wildcards in redirect URIs to not introduce security risks!

Activity

Total releases

2

First release

Jan 2025

Latest release

1 year ago

Release cadence

0 days

Stability

50% stable

Releases

Version	Type	Release date
1.0.0	Stable	Jan 10, 2025
1.x-dev	Dev	Jan 10, 2025