Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Is it possible to configure wildcards for subdomains in Browser Redirects `allow list`, such as `https://*.<http://example.com|example.com>`. We use subdomains to represent on-demand staging environments, but we receive an error message when a new environment is created and the allow list is not reconfigured. Adding this feature would be a great help to us and other users with similar use cases.

<https://github.com/ory/kratos/pull/3240/files#diff-210c63f517f4eaeb30e79ab769189658573afb1b0ca192f0148abac2dd55456eR269-R287>

so it was url encoded... looks like a front-end bug

yes, I typed `https://*.whatever`  and the frontend converted it to %2A, is there any other way I can set this value using rest api / ory sdk and bypass frontend?

Or dev tools edit &amp; resend if you are confident with those

Firefox has an “Edit and Resend” option I was able to use to submit a wildcard.