OAuth Redirect URI Validator

Check a redirect URI against the OAuth 2.0 Security Best Current Practice - HTTPS except loopback, exact-match, no wildcards or fragments.

Redirect URI

Uses HTTPS (or is a loopback address, which is exempt).

No wildcard in the URI.

No fragment component.

Based on the OAuth 2.0 Security Best Current Practice - exact-match, HTTPS (except loopback), no wildcards or fragments.

Was this tool helpful?

See this same kind of analysis applied to your whole repository

Call graphs, dead code, blast radius, and a health score. Results in 60 seconds, free.

Analyze a repository

Related tools

See all Security tools →

CORS Config Generator/Explainer

Origins, methods, headers to generated CORS headers.

Security Risk Scanner

Paste a real GitHub repo - hardcoded secrets, unsafe dynamic execution, string-built SQL, insecure transport, and weak cryptography. Sign in required.

JWT Inspector

Decode a JWT header and payload, check expiry - decode-only, signing key never needed.

Bcrypt Cost Factor Calculator

A measured benchmark on your hardware plus a target hash time to the right bcrypt cost factor.

AWS IAM Policy Generator

Service, access level, and a resource ARN to a valid, scoped IAM policy JSON.

Runs entirely in your browser. Nothing is stored. Free forever.