Hi everyone,
I'm implementing an integration with Webex using OAuth 2.0 Device Authorization Flow.
Even though I configured the following redirect URIs in my Webex integration settings (as per the official documentation):
https://oauth-helper-a.wbx2.com/helperservice/v1/actions/device/callback
https://oauth-helper-r.wbx2.com/helperservice/v1/actions/device/callback
https://oauth-helper-k.wbx2.com/helperservice/v1/actions/device/callback
I got an error in the browser URL after user authentication:
error=redirect_uri_mismatch&error_description=The%20redirection%20URI%20provided%20does%20not%20match%20a%20pre-registered%20value.
After checking the request in DevTools, I noticed that Webex automatically redirected the request to a different URI:
https://oauth-helper-d.wbx2.com/helperservice/v1/actions/device/callback
(Instead of a/r/k
, Webex changed it to d
.)
Surprisingly, when I manually added the d
version to my integration settings, everything worked fine.
Why is Webex using a redirect_uri
that is not listed in the official documentation?
Is this a recent change, or is the Webex OAuth system dynamically assigning different URIs?
Should I expect additional changes to the redirect_uri
structure in the future?
Is there an official Webex recommendation on how to handle these dynamic redirect URIs?