Merge pull request github#21152 from codewithdev/codewithdev-20631

am-stead · web-flow · commit 6c6dca351b3c · 2022-10-10T22:23:56.000+02:00
Added exceptional subdomains in the redirect URLs
diff --git a/content/developers/apps/building-oauth-apps/authorizing-oauth-apps.md b/content/developers/apps/building-oauth-apps/authorizing-oauth-apps.md
@@ -283,14 +283,16 @@ you or your users have two-factor authentication enabled.
 
 The `redirect_uri` parameter is optional. If left out, GitHub will
 redirect users to the callback URL configured in the OAuth Application
-settings. If provided, the redirect URL's host and port must exactly
+settings. If provided, the redirect URL's host (excluding sub-domains) and port must exactly
 match the callback URL. The redirect URL's path must reference a
 subdirectory of the callback URL.
 
     CALLBACK: http://example.com/path
 
     GOOD: http://example.com/path
     GOOD: http://example.com/path/subdir/other
+    GOOD: http://oauth.example.com/path
+    GOOD: http://oauth.example.com/path/subdir/other
     BAD:  http://example.com/bar
     BAD:  http://example.com/
     BAD:  http://example.com:8080/path
