wso2 / product-is

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
http://wso2.github.io/
Apache License 2.0
742 stars 720 forks source link

Unable to set callback url in connections from the console app #17595

Open janakamarasena opened 10 months ago

janakamarasena commented 10 months ago

Describe the issue: In the Carbon based management console for Identity Providers it is possible to set the callback url to any url.

Screenshot 2023-11-06 at 15 47 43

But in the new Console app it is not possible to set the callback url in a connection.

Screenshot 2023-11-06 at 15 47 23

This is a breaking change when switching to the new console from the old carbon management console. This especially becomes a blocker for api based authentication as it is expected to set the apps redirect url as the callback

How to reproduce: Try creating a connection from the console app and setting a callback url.

Expected behavior: Should be able to set a prefered callback url.

Environment information (Please complete the following information; remove any unnecessary fields) :


Optional Fields

Related issues:

Suggested labels:

pavinduLakshan commented 10 months ago

The redirect URI can't be edited in the previous IS versions as well. The following screenshot is from IS 6.1.

Screenshot 2023-11-15 at 00 49 18

Do we still require allowing any URL to be set as the authorized redirect URI for the connections?

This especially becomes a blocker for api based authentication as it is expected to set the apps redirect url as the callback

AFAIU, each app's redirect URI should be set in application > protocol section, not in the connection's settings, shouldn't it?

Please correct me If I'm wrong and apologies if I'm missing something obvious here :)

janakamarasena commented 10 months ago

In the previous IS versions the console app was in beta and the main management app was the carbon management console. In the carbon management console, this url is editable. And since the carbon management console will be deprecated and the new react based portal is the one that will be used, for this particular it is a blocker IMO

pavinduLakshan commented 10 months ago

Removing the blocker status as per the offline conversation with @janakamarasena