Difference between v11 and v12: OAuthServer.config


The server where Aras is installed have an alias. With the version 11, the OAuth server automatically get the current alias.

With v12, apparently, there's a file OAuthserver.config where we need to configure the alias of the application.

Why is that ?

Best Regards,


Parents Reply Children
  • Hi AlBer,

    The purpose of these <redirectUris/> are to help protect against any malicious applications that might try to get a token through the OAuth Server. The Aras Innovator installer automatically populates these URIs based on all of the aliases that it can find by running a small script. However, this script may not find any custom aliases that you've defined so they will need to be added here manually.

    The reason you didn't need to do this in 11.0 was that this concept of a redirect URI from the OAuth Server didn't exist since the Client handled the login itself.


  • Thank you for your answer !