## Summary

The **Programmatic Redirect Domain Whitelist** is used to restrict the allowed redirect URLs when using programmatic login.

Whitelisted domains must match the redirect URL exactly; otherwise, the domain will be rejected.

For example, whitelisting `example.com` will only accept a redirect URL that matches `example.com`.

`dev.example.com` will be rejected, as the hostname does not exactly match `example.com`.

## How to configure

**Core:**

| **Config file keys** | **Environment variables** | **Type** | **Usage** | **Default** |
| :-- | :-- | :-- | :-- | :-- |
| `programmatic_redirect_domain_whitelist` | `PROGRAMMATIC_REDIRECT_DOMAIN_WHITELIST` | `string` (array) | **optional** | `localhost` |

### Examples

```yaml
programmatic_redirect_domain_whitelist:
  - localhost
  - redirect-uri.com
```

```bash
PROGRAMMATIC_REDIRECT_DOMAIN_WHITELIST=localhost,redirect-uri.com
```

**Enterprise:**

`programmatic_redirect_domain_whitelist` is a bootstrap configuration setting and is not configurable in the Console.

**Kubernetes:**

Kubernetes does not support **Programmatic Redirect Domain Whitelist**