# Is it possible to change the callback url?

**URL:** https://discourse.nodered.org/t/is-it-possible-to-change-the-callback-url/66217
**Category:** General
**Tags:** security
**Created:** [9 August 2022 12:00 UTC](https://discourse.nodered.org/t/is-it-possible-to-change-the-callback-url/66217 "2022-08-09T12:00:21Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![DJDev](https://avatars.discourse-cdn.com/v4/letter/d/59ef9b/32.png) [@DJDev](https://discourse.nodered.org/u/DJDev)
#### Post date: [9 August 2022 12:00 UTC](https://discourse.nodered.org/t/is-it-possible-to-change-the-callback-url/66217/1 "2022-08-09T12:00:21Z")

</div>

in case OAuth/OpenID based authentication is used a callback url is required.  
in the "securing Node-Red" section the following is described:  
The `callbackURL` used by a strategy is where the authentication provider will redirect to following an auth attempt. It must be the URL of your Node-RED editor with `/auth/strategy/callback` added to the path. For example, if you access the editor at `http://localhost:1880` , you would use `http://localhost:1880/auth/strategy/callback`

Unfortunately I have to integrate with a system that only allows a limited set of callback urls. For instance 'auth/strategy/callback' is not allowed but 'callback' is. Is it possible to change the callback url path in NodeRed?.

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [9 August 2022 12:29 UTC](https://discourse.nodered.org/t/is-it-possible-to-change-the-callback-url/66217/2 "2022-08-09T12:29:54Z")

</div>

I don't think it is but Nick might need to weigh in to be sure.

The other thing you could do would be to use a proxy to forward a `/callaback` path to `/auth/strategy/callback`.

Alternatively, don't do OAuth in node-red, do it at the proxy level instead.

Also, I'm not entirely certain whether some OAuth services will let you return to a non-TLS endpoint? Another advantage of using a proxy (as long as it is either on the same device or on the same but secure network) is that you don't need to worry about putting TLS overheads onto Node-RED and can leave them at the proxy which typically will handle them more efficiently.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [16 September 2022 08:36 UTC](https://discourse.nodered.org/t/is-it-possible-to-change-the-callback-url/66217/3 "2022-09-16T08:36:28Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
