OWASPASVS 5.0 requirement

ASVS-V10.4.1 The authorization server validates redirect uris based on a client-specific allowlist of pre-registered uris using exact string comparison.

L1 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V10 OAuth and OIDC
Section: V10.4 OAuth Authorization Server
Level: L1 (requirement applies from this verification level up)

Requirement

Verify that the authorization server validates redirect URIs based on a client-specific allowlist of pre-registered URIs using exact string comparison.