# Mobile Oauth Redirect URI **URL:** \ **Category:** API & Developers\ **Tags:** authentication\ **Created:** [27 March 2021 01:28 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614 "2021-03-27T01:28:58Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Trevor\_Rydalch](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/trevor_rydalch/32/73279_2.png) [@Trevor\_Rydalch](https://forum.asana.com/u/Trevor_Rydalch)\ **Post date:** [27 March 2021 01:28 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614/1 "2021-03-27T01:28:58Z")
I’m attempting to implement oauth authentication in a react native expo managed application. I’m relatively inexperienced with Oauth, though I think I have a decent high-level understanding of how it works. The problem I’ve run into is that the redirect URI must be in the https or http schema, and deep linking is not supported. So I’m not sure how to redirect users to my application after they’ve allowed the app access to their data. I’ve searched SO, reddit, and this forum, but didn’t find anything (although, I’d be surprised if no one has encountered this). ---
**Author:** ![Bastien\_Siebman](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/bastien_siebman/32/172354_2.png) [@Bastien\_Siebman](https://forum.asana.com/u/Bastien_Siebman)\ **Post date:** [27 March 2021 05:53 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614/2 "2021-03-27T05:53:36Z")
OAuth is a complex thing and I am still wrapping my head around it. That being said, and because I struggled many times, I am confident to say that at the moment you will not be able to implement Asana OAuth without a webserver. It used to work, my apps were using OAuth on the client-side only, and they changed the way it worked a few months ago. I had to code a backend auth… @Phil_Seeman do you concur? ---
**Author:** ![Phil\_Seeman](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/phil_seeman/32/81525_2.png) [@Phil\_Seeman](https://forum.asana.com/u/Phil_Seeman)\ **Post date:** [27 March 2021 06:12 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614/3 "2021-03-27T06:12:57Z")
I wasn’t aware it was previously possible to do it client-side only, but I’m no OAuth expert, either. I would say yes, you’d need a server to handle your side of the OAuth handshake process. ---
**Author:** ![Bastien\_Siebman](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/bastien_siebman/32/172354_2.png) [@Bastien\_Siebman](https://forum.asana.com/u/Bastien_Siebman)\ **Post date:** [31 March 2021 11:20 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614/4 "2021-03-31T11:20:11Z")
> [@Phil\_Seeman](#): > > I wasn’t aware it was previously possible to do it client-side only I was surprised as well, it was kind of a hack I think 😅 ---
**Author:** ![Bastien\_Siebman](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/bastien_siebman/32/172354_2.png) [@Bastien\_Siebman](https://forum.asana.com/u/Bastien_Siebman)\ **Post date:** [31 March 2021 11:20 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614/5 "2021-03-31T11:20:34Z")
@Trevor_Rydalch I am using Firebase for the backend, really easy to set up especially with mobile. ---
**Author:** ![Trevor\_Rydalch](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/trevor_rydalch/32/73279_2.png) [@Trevor\_Rydalch](https://forum.asana.com/u/Trevor_Rydalch)\ **Post date:** [6 April 2021 21:06 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614/6 "2021-04-06T21:06:40Z")
Maybe I’ll have to look into that. So would the server just perform the handshake and the redirect to the native deep link in the app? ---
**Author:** ![Bastien\_Siebman](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/bastien_siebman/32/172354_2.png) [@Bastien\_Siebman](https://forum.asana.com/u/Bastien_Siebman)\ **Post date:** [7 April 2021 05:50 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614/7 "2021-04-07T05:50:43Z")
The server generates the auth token from the access\_token and will have to share it with the app so it can make the calls ---
**Author:** ![system](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/system/32/276370_2.png) [@system](https://forum.asana.com/u/system)\ **Post date:** [30 May 2025 19:05 UTC](https://forum.asana.com/t/mobile-oauth-redirect-uri/115614/8 "2025-05-30T19:05:50Z")