Authenticated-authorization-requests (Section)#

Path: /profiles/profile{id, type}/settings/authorization-server/redirect-uri-validation-policies/redirect-uri-validation-policy{id}/request-validation/authenticated-authorization-requests

Configure how a redirect_uri is validated when it is received as part of a request where the client was authenticated, e.g. when it is a PAR or CIBA request.

Parameters#

NameTypeRequiredDefaultDescription
validate-portbooleanoptionaltrueConsider the port in the URL when comparing the registered URI with the requested redirect_uri
validate-pathbooleanoptionaltrueValidate the path part of the URI to match exactly the registered path
allow-suffix-pathbooleanoptionalfalseAllow the registered path to be appended with suffix path parts per request
validate-querystringbooleanoptionaltrueValidate the querystring to match (dynamic clients) or start with the configured querystring (static clients). If disabled, any querystring value is acceptable.
domain-validationenumerationoptionalexactValidation on the domain parts of the URI

Was this helpful?