scw login gives Invalid App to redirect

[vilmosnagy]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Command attempted

scw login

Expected Behavior

Login should proceed

Actual Behavior

The webpage gives me Invalid App to redirect

More info

⛵ rc-dev in ~ took 55s 
❯ scw version
Version          2.54.0
BuildDate        2026-04-02T07:01:46Z
GoVersion        go1.26.1
GitBranch        HEAD
GitCommit        da45726d
GoArch           amd64
GoOS             linux
UserAgentPrefix  scaleway-cli

⛵ rc-dev in ~ 
❯ uname -a 
Linux vnagy-dell 6.17.0-20-generic #20-Ubuntu SMP PREEMPT_DYNAMIC Fri Mar 13 20:07:29 UTC 2026 x86_64 GNU/Linux

⛵ rc-dev in ~ 
❯ cat /etc/lsb-release 
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=25.10
DISTRIB_CODENAME=questing
DISTRIB_DESCRIPTION="Ubuntu 25.10"

[yigitkonur]

same bug on macos, also reproducible on scw 2.53.0 — so it's not ubuntu-specific and not isolated to 2.54.0.

repro

$ scw login
waiting for callback from browser...
^C

browser opens https://account.scaleway.com/authenticate?redirectToUrl=http://localhost:57094/callback, i log in, console then shows a red invalid app to redirect banner and the callback never fires. killing with ctrl+c is the only exit.

env

$ scw version
Version          2.53.0
GoVersion        go1.26.1
GoArch           arm64
GoOS             darwin
UserAgentPrefix  scaleway-cli

$ sw_vers
ProductName:    macOS
ProductVersion: 26.3.1
BuildVersion:   25D771280a

observations

• the redirectToUrl query param points at http://localhost:<ephemeral-port>/callback, which looks like it's the thing the console is rejecting as "invalid app"
• port changes each run (57094 here), so it's not a fixed allowlist issue on the cli side — feels like the console auth endpoint lost/tightened its acceptance of arbitrary localhost callbacks
• scw init with a manually-generated api key from the console still works fine as a workaround, so only the oauth/browser flow is broken

looks like a server-side regression on account.scaleway.com rather than anything cli-version specific.