Add Allowed Redirect Domains
If you use Wix-hosted pages for processes such as checkout, Wix returns the visitor to your site or app after the process is completed. To protect data security, Wix only ever redirects visitors to addresses you approve.
For non-authorization related redirects, you provide a domain to allow redirects to all URLs under that domain.
Authorization related redirects require exact matching URIs. To set allowed authorization redirect URIs, see Allowed Authorization Redirect URIs.
You can add allowed redirect domains:
From the dashboard
To add Allowed redirect domains for non-authorization redirects:
-
In your project dashboard, go to Settings > Development & integrations > Headless Settings.
-
From Headless clients, click the three dots to the right of the OAuth app you want to edit. Choose Settings to open the app's settings page:
-
Scroll down to the URLs section and go to the Allowed redirect domains section.
-
Click Add Redirect Domain and enter a domain you authorize Wix to redirect back to from Wix-hosted pages. For example,
www.my-site.comauthorizes all URLs under this domain. To authorize multiple domains, click Add Redirect Domain again as many times as you need. -
Click Save to save your changes and return to the main Headless Settings page.
With the API
You can also manage allowed redirect domains programmatically with the Update OAuth App method. This is useful in automated or LLM-driven setup flows where the deployment domain isn't known at the time the OAuth app is first created.
To update the allowed redirect domains:
Note: The mask.paths field is required and specifies which fields to update. Fields not included in the mask are left unchanged. To add domains without overwriting existing ones, first retrieve the current list with Get OAuth App, merge your new domains into the existing list, and then send the full merged list in your update request.