Allow Redirect URIs and Domains

After login, or after a Wix-hosted process such as checkout, Wix redirects a visitor or member back to a site or app. It only redirects to addresses you approve in advance. You configure allowed redirects in your Headless Settings:

• Authorization redirect URIs: For login callbacks. These require an exact matching URI.
• Redirect domains: For non-authorization redirects, such as returning from a Wix-hosted checkout. These apply at the domain level, allowing all URLs under that domain.

Allowed authorization redirect URIs

Use an authorization redirect URI to allow a login callback. You must provide an exact matching URI.

1. In your project dashboard, go to Settings > Development & integrations > Headless Settings.

2. From Headless clients, click the three dots to the right of the client you want to edit. Choose Settings to open its settings page:

   

3. Under URLs, go to the Allowed authorization redirect URIs section.

   

4. Click Add Redirect URI and enter a precise URI you authorize Wix to redirect back to from Wix-hosted authentication pages. For example, https://www.my-site.com/login-callback authorizes only this path, not other URIs under the same domain. To authorize multiple URIs, click Add Redirect URI again as many times as you need.

5. Click Save to save your changes and return to Headless Settings.

Allowed redirect domains

Use an allowed redirect domain for non-authorization redirects, such as returning a visitor to a site after a Wix-hosted checkout. A domain authorizes all URLs under it.

From the dashboard

1. In your project dashboard, go to Settings > Development & integrations > Headless Settings.

2. From Headless clients, click the three dots to the right of the client you want to edit. Choose Settings to open its settings page:

   

3. Under URLs, go to the Allowed redirect domains section.

   

4. Click Add Redirect Domain and enter a domain you authorize Wix to redirect back to from Wix-hosted pages. For example, www.my-site.com authorizes all URLs under this domain. To authorize multiple domains, click Add Redirect Domain again as many times as you need.

5. Click Save to save your changes and return to Headless Settings.

With the API

You can also manage allowed redirect domains programmatically with the Update OAuth App method. This is useful in automated or LLM-driven setup flows where the deployment domain isn't known at the time the client is first created.