Using the Authorization Code Flow Without a Redirect
Sep 10, 2025
Overview
This article addresses whether the Authorization Code Flow can be implemented without a redirect URI. It clarifies that, according to the OAuth 2.0 specification, a redirect is a mandatory component of this flow.
Applies To
- Authorization Code Flow
- Authorization Code Flow with Proof Key for Code Exchange (PKCE)
- OAuth 2.0
- Redirect URIs
Solution
It is not possible to use the Authorization Code Flow or the Authorization Code Flow without a redirect. The redirect URI is a required parameter and a core component of the OAuth 2.0 specification for these flows. This is true for the authorization code flow with PKCE as well.
