Redirect_uri in dynamically registered OIDC client can't be localhost

[Wessel, Keith]

Hi, all,

We discovered this a while back, but we've ignored it, and I'm wondering if it was an intentional choice or just a side effect of URL sanity checking. At least since V3.0, and maybe before, the IdP refuses to accept a dynamically registered OIDC client that has localhost as a hostname. I don't think it's localhost that it specifically disapproves of; I think it's the lack of a dot. Localhost.localdomain, for instance, works if it's in the hostname part of the URL.

This used to work in earlier versions of the OIDC extension. It definitely worked back in the days of 1.X.

Is this intentional? And, if so, is there some undocumented property or parameter to allow it?

Thanks,
Keith