Authenticated-authorization-requests (Section)#
Path: /profiles/profile/settings/authorization-server/redirect-uri-validation-policies/redirect-uri-validation-policy/request-validation/authenticated-authorization-requests
Configure how a redirect_uri is validated when it is received as part of a request where the client was authenticated, e.g. when it is a PAR or CIBA request.
Parameters#
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| validate-port | boolean | optional | true | Consider the port in the URL when comparing the registered URI with the requested redirect_uri |
| validate-path | boolean | optional | true | Validate the path part of the URI to match exactly the registered path |
| allow-suffix-path | boolean | optional | false | Allow the registered path to be appended with suffix path parts per request |
| validate-querystring | boolean | optional | true | Validate the querystring to match (dynamic clients) or start with the configured querystring (static clients). If disabled, any querystring value is acceptable. |
| domain-validation | enumeration (exact, tld-plus-one, tld-plus-two, no-validation) | optional | exact | Validation on the domain parts of the URI |