Invalid Redirect: must end with a public top-level domain (such as .com or .org).
Invalid Redirect: must use a domain that is a valid top private domain .
Missing Top-Level Domain: The error message states that the redirect URI must end with a public top-level domain such as .com or .org. The URI you provided, https://rpaorchestrator:1443/identity_/google-signin, lacks a valid top-level domain. A correct example would be: https://rpaorchestrator:1443/identity_/google-signin.com or https://rpaorchestrator:1443/identity_/google-signin.org.
Invalid Private Domain: If the domain “rpaorchestrator” is intended to be a private domain (e.g., a local network), it won’t be accepted as a valid redirect URI. Google requires a public domain (e.g., a domain that is accessible over the internet) for security reasons. You need to use a public domain that you own or control for the redirect URI.
The errors you are getting are because the redirect URI you are trying to use does not meet the requirements for a valid redirect URI. The redirect URI must:
End with a public top-level domain, such as .com or .org.
Use a domain that is a valid top private domain, such as .edu or .gov.
Not contain the port number.
The redirect URI you are trying to use, https://rpaorchestrator:1443/identity_/google-signin 1, does not meet these requirements. The port number is not allowed, and the domain rpaorchestrator is not a valid top-level domain.
Lack of Top-Level Domain: The Redirect URI you provided, https://rpaorchestrator:1443/identity_/google-signin, lacks a top-level domain like .com or .org. A top-level domain is a crucial part of a valid URL, and it typically comes after the last dot in the address (e.g., https://example.com).
Invalid Domain Name: The domain name in the Redirect URI might be incorrect or not meeting the requirements of a valid top-level private domain. For example, using local domain names like .local or .lan may not be allowed as Redirect URIs.
To fix these errors, you should use a valid domain with a top-level domain such as .com, .org, .net, etc. Ensure that the domain you use is accessible publicly and is correctly configured in your system. If this is a local testing environment, you might need to set up a valid local domain name or use a tool like ngrok to create a temporary public domain for testing purposes.
A valid Redirect URI could look like:
https://example.com/google-signin
Make sure to replace example.com with your actual domain name.