Which of the following is a valid redirect URI for local testing in Enhanced Packages?

• A. https://localhost:8443/
• B. http://example.com/app
• C. https://127.0.0.1:{port}/*
• D. https://myapp.local/callback

Answer: (C)

For local testing, redirect URIs should point to the developer’s own machine using a loopback address, with a specific port and a flexible callback path. Using the loopback IP 127.0.0.1 ensures the redirect never leaves your device, keeping testing isolated and secure. The port placeholder lets you run the local server on any port, and the wildcard path (/*) accommodates any callback route your app might use during the OAuth flow. This combination matches typical local-development setups and works with platforms that require loopback addresses for testing.

The other options don’t fit because they either use a hostname instead of the loopback IP, rely on an insecure HTTP scheme, or reference a domain that isn’t a reliable local loopback endpoint.