On an already published app, it is not possible to update the redirect URI and have it approved. Instead of behaving like an unpublished app and allowing the redirect URI to work temporarily, the following error message will be shown when using the already published app:
Redirect URIs should be approved instantly since they pose no additional risks, or Roblox moderators should be able to use the application as if the redirect URI was approved.
For apps in private mode, the system automatically updates your edits with your users. For apps in public mode, you must submit the app for review again to reflect these changes. Otherwise, the system saves the unpublished changes for you without releasing it to the community.
However, we generally should allow updating redirect URIs on a public app unless URL/domain policies apply. Via private message, could you send me your app client ID and redirect URIs?
Following up here, another potential reason for the app rejection may be because the moderator isn’t able to review the app landing page and the sign in flow themselves. This generally requires the landing page (or an easily accessible page from there) to clearly show how a user/moderator should proceed with the OAuth 2.0 flow (e.g. “Sign in with Roblox” button).
At a glance, I don’t see any way of logging in with Roblox at https://blendcafe.xyz/. Could you provide more details on how to clearly log in?
Unfortunately, this testing requirement is currently not documented. We’re currently in-progress to make this requirement and the testing process clearer for app creators/moderators, as this issue has surfaced on several other devforum posts as well.
The entry point is in the Entry Link field of the application. It leads to a Discord server where there are clear instructions on how to access the flow. The page said this link could be a chat server, so there shouldn’t be any issues.
Discussed internally, and given your case and other exceptional cases where moderators aren’t easily able to test, we’re considering a video being a more robust alternative to validate that the app and its Roblox login flow is within policy.
Could you send a video via private message, or just as a reply to this thread, walking through the “sign in with Roblox” flow through your discord server from the perspective of a new user? I should be able to unblock the app moderation process for you and approve your app afterwards. The video will also help us determine what criteria we should require from a policy perspective. Thanks in advance!
Followed up in private message, this issue should now be resolved.
The core issue necessitates creator/moderation guidance improvements to make the app intent and the login flow of an OAuth 2.0 app more clear. We will be exploring creator video submissions as the core approach. This enables creators to provide additional context, and moderators aren’t required to set up an iOS/Android device or other third party platform accounts for testing.
