Loopback redirect URI incorrectly considered insecure

empwilli — Sat, 26 Apr 2025 06:28:25 GMT

When I want to add a loopback redirect URI for my app in the WebUI everything works fine if I follow the docks, e.g. with an URI like: http://127.0.0.1/some/redirect/path.

However, if the redirect path (mind you, the path section, not the domain name), contains dashes, e.g. with an URI like: http://127.0.0.1:1234/some-redirect/path

I've included two screenshots of the good and the broken case.

topic Loopback redirect URI incorrectly considered insecure in Spotify for Developers

Loopback redirect URI incorrectly considered insecure