OpenID provider cannot process the request: redirect_uri does not match the configuration

[migsafa]

Hello!

Following the tutorial https://developers.sap.com/tutorials/cp-cf-security-xsuaa-create..html#89359a09-cfe1-406a-9787-80152... I arrived at step 9 and executed the second call:

But the system, insted of returning the no dara message, is returning the following error:

I found this post: https://community.sap.com/t5/technology-q-a/sap-cap-app-router-invalid-uri/qaq-p/12704587 and applied the accepted solution in xs-security.json file:

{
...
"oauth2-configuration": {
    "redirect-uris": [
        "http://*.localhost:4004/**",
        "https://*.hana.ondemand.com/**",
        "https://*.applicationstudio.cloud.sap/**"
    ]
}
}

Am I missing something? Bear in mind that I had to change the route to be unique inside the CF landscape. Other strange thing is That it does not consider auth key generation.

Please help! 

Regards,

Mig

[migsafa · Accepted solution]

Solved!

As simple as update the XSUAA service instance configurarion in cloud foundry 🙂 based on changes made in xs-security.json, with the command: 

cf update-service xsuaa-service-tutorial -c security/xs-security.json

Hope this helps someone.

[rashmiangadi · Accepted solution]

Hi Mig, Tried this approach its not helping. It was all working and suddenly it stopped working. This is added in xs-security.json "oauth2-configuration": { "redirect-uris": [ "http://localhost:5000/" ]. and using approuter version 20. Can it be something to do with BTP trust configuration

[minjie_lao · Accepted solution]

i also facing the issue recently, running the update xsuaa is not helping the issue

[mcrozier · Accepted solution]

We are seeing this same issue now in a production service, and across all environments. It appears that of 10th April something changed in BTP and this has broken multiple services using an XSUAA configuration.

[Jacques-Antoine · Accepted solution]

Same issue here since the last BTP update on one custom Node.js app. Trying to find what need ti be changed, without any success for now. Any input from the community would be great!