# Oauth callback redirects automatically to https

**URL:** <https://devforum.zoom.us/t/oauth-callback-redirects-automatically-to-https/27993>\
**Category:** API and Webhooks\
**Created:** [August 24, 2020, 5:34pm UTC](https://devforum.zoom.us/t/oauth-callback-redirects-automatically-to-https/27993 "2020-08-24T17:34:59Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![dmaravillosa](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dmaravillosa/32/13999_2.png) [@dmaravillosa](https://devforum.zoom.us/u/dmaravillosa)\
**Post date:** [August 24, 2020, 5:34pm UTC](https://devforum.zoom.us/t/oauth-callback-redirects-automatically-to-https/27993/1 "2020-08-24T17:34:59Z")

</div>

**Description**  
A few weeks ago I’m using a local endpoint for my callback just like this [http://sampleurl.local/api/callback](http://sampleurl.local/api/callback) for the oauth code request which works perfectly fine. But for some reason when I try to request an oauth code now, I noticed that it automatically changes the “http” to “https” on my callback which results into a “site cannot be reached error”.

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth code request

This is the format of my oauth request:  
[https://zoom.us/oauth/authorize?response\_type=code&client\_id=123123123](https://zoom.us/oauth/authorize?response_type=code&client_id=123123123) &redirect\_uri=http://sampleurl.local/api/callback

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [August 27, 2020, 5:53pm UTC](https://devforum.zoom.us/t/oauth-callback-redirects-automatically-to-https/27993/2 "2020-08-27T17:53:59Z")

</div>

Hey @dmaravillosa,

Thanks for reporting this. We will investigate the issue and get back to you with an update. (ZOOM-191046)

-Tommy

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [August 28, 2020, 5:55pm UTC](https://devforum.zoom.us/t/oauth-callback-redirects-automatically-to-https/27993/3 "2020-08-28T17:55:15Z")

</div>

Hey @dmaravillosa,

Make sure to use a redirect url that is secured with `https`. That being said, I will see when this change was made.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![mokutsu](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mokutsu/32/27515_2.png) [@mokutsu](https://devforum.zoom.us/u/mokutsu)\
**Post date:** [September 4, 2020, 1:05am UTC](https://devforum.zoom.us/t/oauth-callback-redirects-automatically-to-https/27993/4 "2020-09-04T01:05:05Z")

</div>

Hi, I just wanted to add on that I am also seeing this and was surprised to be honest

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [September 8, 2020, 6:46pm UTC](https://devforum.zoom.us/t/oauth-callback-redirects-automatically-to-https/27993/5 "2020-09-08T18:46:54Z")

</div>

Hey @mokutsu,

Thanks for your feedback. Make sure to use `https` going forward.

-Tommy

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [October 9, 2020, 4:46am UTC](https://devforum.zoom.us/t/oauth-callback-redirects-automatically-to-https/27993/6 "2020-10-09T04:46:58Z")

</div>

Closed on October 9, 2020, 4:46am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.