#Single string in auth domain

1 messages · Page 1 of 1 (latest)

green oriole
#

is it possible to set a single string in the auth.config.ts domain? or even just exclude the "https://" like myDomain.io without convex appending it automatically?

vale bisonBOT
#

Hi @green oriole. I'm kapa.ai, your friendly support bot. I will try to answer your question by searching through the knowledge base. :wave:

#

Based on the provided knowledge sources, the domain field in Convex's auth.config.ts should match the issuer (iss) field in the JWT exactly, which typically includes the full URL, including the protocol (e.g., https://your.issuer.url.com). The documentation and examples consistently show the domain as a full URL, not just a bare domain string or one without the protocol. For example:

export default {  
  providers: [  
    {  
      domain: "<https://your.issuer.url.com",>  
      applicationID: "your-application-id",  
    },  
  ],  
};

The documentation also explicitly states: "the domain property must exactly match the iss field of the JWT" and refers to using tools like jwt.io to confirm this match. There is no mention of Convex automatically appending "https://" if it is missing, nor is there any indication that a bare domain (like myDomain.io) is supported or recommended. Using a domain without the protocol may result in a mismatch and failed authentication Custom OIDC Provider.

Therefore, you should always include the full URL (with "https://") in the domain field. Excluding "https://" or using a single string like "myDomain.io" is not supported according to the official documentation.

Note: you can ask me a follow up question by @ mentioning me again :speech_balloon: