# scrubbedReturnUrl

**Kind:** Function

**Source:** [`atloria-monorepo/packages/ui-core/src/components/api-explorer/oauth2.ts`](https://github.com/sherkety/atloria/blob/main/atloria-monorepo/packages/ui-core/src/components/api-explorer/oauth2.ts#L495)

The address bar with every OAuth2 parameter removed.

An authorization code is single-use but still a credential, and an implicit token is the
credential itself — neither belongs in browser history, a bookmark, or a `Referer` header.

## Signature

```ts
function scrubbedReturnUrl(href: string): string
```

## Parameters

| Name | Type |
|---|---|
| `href` | `string` |

**Returns:** `string`