OAuth Callback URL Mismatch with GitHub/Google Provider
OAuth authentication fails with error 'redirect_uri_mismatch' or callback page shows blank/error. Users cannot sign in via GitHub or Google because the configured redirect URL doesn't match.
OAuth providers validate that the redirect URL matches exactly what was registered. Any difference in protocol, domain, path, or query parameters will cause the mismatch error.
Error Messages You Might See
Common Causes
- Localhost used in development but https://mysite.com in production config
- Port number mismatch (localhost:3000 vs localhost:5173)
- Protocol mismatch (http vs https)
- Trailing slash differences in callback URL
- Using wrong site domain after deployment
How to Fix It
In Supabase dashboard > Authentication > Providers > GitHub/Google, set redirect URLs:
Development: http://localhost:5173/auth/callback
Production: https://yourdomain.com/auth/callback
Create both entries if supporting both environments. Ensure Vite dev server runs on the exact port configured.
Real developers can help you.
rayush33
JavaScript (React.js, React Native, Node.js) Developer with demonstrated industry experience of 4+ years, actively looking for opportunities to hone my skills as well as help small-scale business owners with solutions to technical problems
Bastien Labelle
Full stack dev w/ 20+ years of experience
Luca Liberati
I work on monoliths and microservices, backends and frontends, manage K8s clusters and love to design apps architecture
ISHANTDEEP SINGH
Senior Software Engineer with 7+ years of experience in React, JavaScript, TypeScript, Next.js, and Node.js. I’ve also worked as a tech lead for startups, owning end-to-end technical execution including architecture, development, scaling, and delivery. I bring a strong mix of hands-on coding, product thinking, and technical leadership, and I’m comfortable building products from scratch as well as improving and scaling existing systems.
Yovel Cohen
I got a lot of experience in building Long-horizon AI Agents in production, Backend apps that scale to millions of users and frontend knowledge as well.
BurnHavoc
Been around fixing other peoples code for 20 years.
Sage Fulcher
Hey I'm Sage! Im a Boston area software engineer who grew up in South Florida. Ive worked at a ton of cool places like a telehealth kidney care startup that took part in a billion dollar merger (Cricket health/Interwell health), a boutique design agency where I got to work on a ton of exciting startups including a photography education app, a collegiate Esports league and more (Philosophie), a data analytics as a service startup in Cambridge (MA) as well as at Phillips and MIT Lincoln Lab where I designed and developed novel network security visualizations and analytics. I've been writing code and furiously devoted to using computers to make people’s lives easier for about 17 years. My degree is in making computers make pretty lights and sounds. Outside of work I love hip hop, the Celtics, professional wrestling, magic the gathering, photography, drumming, and guitars (both making and playing them)
Tejas Chokhawala
Full-stack engineer with 5 years experience building production web apps using React, Next.js and TypeScript.
Focused on performance, clean architecture and shipping fast.
Experienced with Supabase/Postgres backends, Stripe billing, and building AI-assisted developer tools.
Nam Tran
10 years as fullstack developer
MFox
Full-stack professional senior engineer (15+years). Extensive experience in software development, qa, and IP networking.
You don't need to be technical. Just describe what's wrong and a verified developer will handle the rest.
Get HelpFrequently Asked Questions
Do I need HTTPS for callbacks?
Yes for production. Development with localhost HTTP is allowed. All production URLs must use HTTPS.
How do I use different URLs for dev and prod?
Register both URLs in the OAuth provider settings. Use environment variables to switch between them.