Redirect Uri when editing client in TUI

[wlio-tom]

I set up a client in the TUI with 3 redirect Uris, ex. subdomain.domain.com/callback. Later I made a change as subdomain.domain.com/login/callback. I now get the error redirect uri does not match a previously registered client (my front end logic gives the updated uri).

I checked the logs and found the redirect uri comparison was still being made to the old values, yet the TUI and database show the updated uri. I have re deployed but not deleted the database at this point.

Could this be a bug or have I missed a step after updating redirect Uris?

[ossdhaval]

Hi @wlio-tom

We are checking. In the meanwhile, here is the useful documentation around redirect URIs and how Janssen Server compares and manages it.

Adding @yuriyz for his comments.

[ossdhaval]

Hi @wlio-tom We checked. But authentication is getting through if the request contains the new URI.

Can you ensure that the URI in the auth request is the updated one? Can you share the screenshot of the TUI client details page and HAR of the authentication request that you are sending.

[wlio-tom]

Hi @ossdhaval Thanks for taking a look.

What is a little unusual is that I did not actually add these redirect Uris for this client, they were from a previously registered client.

[yuriyz]

According to log there is no https://advisor.wealthinc.app/login/callback registered with client.

1. Check sector identifier. If you have it set, redirect uris are read out of sector identifier.
2. Set logging level to trace, it will give you more information what is going on.

[wlio-tom]

It looks like my sector identifier was the issue.
When I change sector-identifier.json do I need to take any additional steps?
Logs show comparisons are still the old values, but switching Subject Type to Public resolves the problem.

[yuriyz]

Sector identifier response is cached for 1d. If you fix your sector identifier redirect uris, it will automatically get updated in 1d. Or you can force update by AS restart.

There is sectorIdentifierCacheLifetimeInMinutes AS configuration property which allows to change cache lifetime.

[wlio-tom]

I waited out the cache and now fully resolved. Thanks for your help!

[yuriyz]

Great, thanks for info.