Invalid return URL

Query callback_uri must be an absolute https URL listed in uris (or same-origin when allowSameOrigin is true).