"Redirect URIs now need to use a secure https:// URL" (April 2026)
Authorising a new connection from our app has failed with a "something went wrong".
API support advise:
We’re tightening validation around the web address your app uses to receive users back from MYOB after they grant access. Redirect URIs now need to use a secure https:// URL on a supported, registered hostname.
If your app is still using an http:// redirect URI, localhost-style address, desktop/internal hostname, or any non-public callback address, the consent step may appear to proceed, but the final connection back to the app can fail with a generic message such as “unable to connect, something went wrong”.
Could you please check the redirect URI registered for the app and confirm it is using:
https://
a valid registered hostname
a publicly reachable callback URL
an exact match to the redirect_uri sent in the OAuth request
I was not aware of this change, nor can I find any reference to it on this forum, developer.myob.com or apisupport.myob.com. Can anyone provide evidence?
