Spinnaker OAuth login fails with redirect_uri_mismatch

Not specified by the original author.

TL;DR

On Spinnaker below v2025.2.0 the path is YOURMYGATEADDRESSHOST/login instead. In your OAuth provider app settings, add the Authorized Request URI YOURMYGATEADDRESSHOST/login/oauth2/code/[provider] with no trailing slash, where provider is one of azure, github, google, oracle, or other.

Steps

1. In your OAuth provider app settings, add the Authorized Request URI YOURMYGATEADDRESSHOST/login/oauth2/code/[provider] with no trailing slash, where provider is one of azure, github, google, oracle, or other. On Spinnaker below v2025.2.0 the path is YOURMYGATEADDRESSHOST/login instead. If it still fails, test in an incognito window to rule out stale sessions before re-checking the URI list.

When to use

You are seeing this: If it still fails, test in an incognito window to rule out stale sessions before re-checking the URI list. Use this skill when you run into "Spinnaker OAuth login fails with redirecturimismatch".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

Versions mentioned in the source: below v2025.2.0. If you are on something much newer or older, the details may have shifted.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Sources

• YOURMYGATEADDRESSHOST/login/oauth2/code/[provider
• YOURMYGATEADDRESSHOST/login

Source: Official Spinnaker OAuth docs troubleshooting: login fails with Error: redirecturimismatch, where the request redirect URI does not match what is authorized for the OAuth client. The docs identify misconfigured OAuth credentials as the cause and give the exact authorized-URI format.

Verified resolution: In your OAuth provider app settings, add the Authorized Request URI YOURMYGATEADDRESSHOST/login/oauth2/code/[provider] with no trailing slash, where provider is one of azure, github, google, oracle, or other. On Spinnaker below v2025.2.0 the path is YOURMYGATEADDRESSHOST/login instead. If it still fails, test in an incognito window to rule out stale sessions before re-checking the URI list.

Source URL: https://spinnaker.io/docs/setup/other_config/security/authentication/oauth/