Redirect URI(s) for configuration of SCASP in our eSigning service

A redirect uri is where to redirect the user after successful authentication, url encoded value.

The SCASP will provide Buypass with one or more redirect uri(s) upfront in order to configure and set up ‘allowed’ URI(s) in the Buypass Oauth2 server, the OIDC client. The actual URI to be used must be included in each request and must be one of the allowed ones.

In production we are less flexible coming to the structure of uri(s). In TEST we accept use of wildcard ( * ) in TEST, but not in PRODUCTION.

Reference: Final: OpenID Connect Core 1.0 incorporating errata set 2