"Redirect URIs now need to use a secure https:// URL" (April 2026)

We have now resolved this with the assistance of our domain provider, but I'm still looking for an answer as to where the https:// requirement is documented. We used http://desktop for several weeks after the recent scope changes.

I am advised by API support as follows:

• Validation of the redirect url has indeed been tightened quite recently
• This has not been communicated ahead of time
• Consideration is being given to proper communication and documentation

So even after the events of August 2024 (when unannounced changes to the IAM resulted in access to many 3rd party apps being lost), prior communication of changes to all developers and proper documentation is still regarded as unnecessary? 

Hi Mike

Yep I remember August 2024 and everyday wonder, what next from MYOB - notwithstanding 17 June no longer support for local MYOB files - which typically are MS Access databases running the local 8080 api call that will now scrabble to find developers to get them online - as I have just taken on-board a desperate client in such a position - the dbase developer long gone.

Anyways - the subject above is interesting - I have used the redirect http://desktop since Noah sailed into Sydney harbour and still do - and all my apps are still working - I have a test utility I built in Access to download all my clients file UIDs under my dev profile - and then I can test a connection by prosecuting the customer endpoint for their file - and a successful download of their customer table is proof all works.

I did that lastnight and it still works perfectly as do all my apps - however, there maybe a reason - in the August 24 MYOB changes the redirect never returned a web page - as the previous did - and that was the cause of the MYOB cluster ***** August 24 - I however found the return access token in the heading not the redirect and altered all my code to grab that - maybe that is the reason.....

So to apply the updated redirect instructions I need a registered legit domain name as a redirect? 

Thoughts?

Regards The Doc

Hi Doc

We solved the problem by contacting our Website company ( Webwidgets in nz ). They set up a cached page on our site.  Very simple process for them.

We now redirect to it and all works perfectly. I do like your solution but MYOB may not.

Cheers Mark