Problem with multiple callback URLs

[MateuszB]

I develop application which is available on diffrent subdomains, because every company can create own subdomain. So subdomains are created automatically and I have problem with setting callback url in that situation. Is it possible to set callback url as wildcard or something like that? Because I need that Fitbit API will accept callback URL from every subdomain of my domain.

Greetings
Mateusz

[JeremiahFitbit · Accepted solution]

In accordance to the OAuth 2.0 specification, the redirect URIs must be an explicit match. You can specificy multiple callback URIs (one per line) in your app settings, but are limited to 3,000 characters.

A better solution is for you to have a generic callback URI that then redirects back to your company-specific subdomain. You can use the `state` parameter in the authorizatoin process to identify which subdomain your app should then redirect the user to from your generic callback URI.

[MateuszB]

Thank You a lot!