Auth
Callbacks and origins
Exact-match allow-lists that decide where users can land and which browsers may call you.
Callback URLs
After sign-in DevSewa only redirects to a URL on this list, matched exactly (scheme, host, port, path). Rules:
https://is required. Plainhttp://is accepted only forlocalhost,*.localhostand127.0.0.1.- No fragment (
#…). - The ticket is appended as
?ticket=….
Origins
Origins control CORS for browser calls to your DevSewa-backed endpoints. An origin is scheme + host (+ port) only — no path. The same localhost exception applies.