Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

SSRF via OpenID dynamic client registration

Ivan | Last updated: Dec 09, 2021 03:07PM UTC

Dear Portswigger support, I have hard times getting through the lab. this JSON sent to the /reg endpoint: POST /reg HTTP/1.1 Host: oauth-acf01f431f25df1fc07c2d3502f5009a.web-security-academy.net Content-Length: 72 { "redirect_uris": [ "http://artsploit.com/redirect" ] } Always gives: {"error":"invalid_redirect_uri","error_description":"redirect_uris is mandatory property"} But the json validator says it's ok. And the redirect_uri is in there. Please advise. Thank you, Ivan

Ivan | Last updated: Dec 09, 2021 03:49PM UTC

Dear support folks, please disregard, I solved the lab. Thank you, Ivan

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.