[Question]: Oauth application with redirect_uris

[simonh88]

Hello,

I currently migrate our kong to the 2.0.2. The payload of creation of an oauth application has changed now we use redirect_uris instead of redirect_uri

Here is an example of my command
curl --location --request POST 'http://localhost:8001/consumers/thefosk/oauth2/' \ --header 'Content-Type: application/json' \ --data-raw '{ "name": "Hello World App", "redirect_uris": ["http://google.com", "https://google.com", "https://facebook.com"] }'

So my question is why now we can put multiple redirect_uris ? Have you some use cases to use this with multiple redirect_uris ?

I made some tests to see if the response of this call curl --location --request POST 'https://localhost:8443/mock/oauth2/authorize' \ --header 'Content-Type: application/json' \ --header 'Host: mockbin.org' \ --data-raw '{ "response_type": "code", "provision_key": "QIN4ObxGBkEwOaS1VcemOzlKM1Mn8s9f", "client_id": "fe0CqIvtpSvZNIR1IoUGoMIiOIKHBOHP", "scope": "email", "authenticated_userid": "userid123" }'
can differ but it always return the first redirect uri of my previous redirect_uris array.