Dynamic Callback URLs with Wildcards
Feb 20, 2026
Overview
This article clarifies whether Auth0 can handle dynamic callback URLs by dynamically changing the URL path. For instance:
https://<app_domain>.com/<something dynamic>
Applies To
- Callback URLs
- Wildcards
Cause
Solution
This is not supported, as wildcards are only allowed for subdomains. Wildcard placeholders in subdomains should not be used in production applications. Auth0 recommends URLs with the {organization_name} placeholder where relevant. See Subdomain URL Placeholders for additional details.
A workaround for this is to have a specific callback URL and then have your app redirect users to other endpoints, as explained in Allowed Callback URLs ending with a wildcard.
