Static OAuth bounce page for the Fintips app.
Enable Banking rejects custom URL schemes as redirect targets, so bank authorization redirects here and this page forwards the query string to the app's own scheme.
It holds no secrets, stores nothing, sets no cookies, and never sees account data — only a single-use authorization code in transit. The target scheme is a hardcoded map keyed on the directory name, so it cannot be turned into an open redirect.
| Path | Forwards to |
|---|---|
/dev/ |
fintips.dev://auth-callback |
/staging/ |
fintips.staging://auth-callback |
/production/ |
fintips://auth-callback |
Source of truth is web/auth-callback/index.html in the Fintips repo. Edit it there, copy here.