diff --git a/packages/console/src/pages/Applications/components/ProtectedAppForm/index.tsx b/packages/console/src/pages/Applications/components/ProtectedAppForm/index.tsx
index 1185d42bd..9629d1966 100644
--- a/packages/console/src/pages/Applications/components/ProtectedAppForm/index.tsx
+++ b/packages/console/src/pages/Applications/components/ProtectedAppForm/index.tsx
@@ -1,4 +1,4 @@
-import { isValidUrl } from '@logto/core-kit';
+import { validateUriOrigin } from '@logto/core-kit';
 import { ApplicationType, type Application, type RequestErrorBody } from '@logto/schemas';
 import { isValidSubdomain } from '@logto/shared/universal';
 import { condString, conditional } from '@silverhand/essentials';
@@ -147,7 +147,8 @@ function ProtectedAppForm({
           <TextInput
             {...register('origin', {
               required: true,
-              validate: (value) => isValidUrl(value) || t('protected_app.form.errors.invalid_url'),
+              validate: (value) =>
+                validateUriOrigin(value) || t('protected_app.form.errors.invalid_url'),
             })}
             placeholder={t('protected_app.form.url_field_placeholder')}
             error={
diff --git a/packages/phrases/src/locales/de/translation/admin-console/application-details.ts b/packages/phrases/src/locales/de/translation/admin-console/application-details.ts
index 8649930bc..6ac868e5a 100644
--- a/packages/phrases/src/locales/de/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/de/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/de/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/de/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/de/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/de/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/en/translation/admin-console/application-details.ts b/packages/phrases/src/locales/en/translation/admin-console/application-details.ts
index 1f48bb46a..6b8d4ae65 100644
--- a/packages/phrases/src/locales/en/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/en/translation/admin-console/application-details.ts
@@ -73,7 +73,7 @@ const application_details = {
   app_domain_protected_description_2:
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   custom_rules: 'Custom authentication rules',
   custom_rules_placeholder: '^/(admin|privacy)/.+$',
   custom_rules_description:
diff --git a/packages/phrases/src/locales/en/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/en/translation/admin-console/protected-app.ts
index 133d2a438..51cb1e0b1 100644
--- a/packages/phrases/src/locales/en/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/en/translation/admin-console/protected-app.ts
@@ -19,7 +19,7 @@ const protected_app = {
     url_field_placeholder: 'https://',
     url_field_description: 'Enter the primary website address of your application.',
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     create_application: 'Create application',
     create_protected_app: 'Create and experience auth protection',
     errors: {
@@ -29,7 +29,7 @@ const protected_app = {
         "Invalid subdomain format: use only lowercase letters, numbers, and hyphens '-'.",
       url_required: 'Origin URL is required.',
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   success_message:
diff --git a/packages/phrases/src/locales/es/translation/admin-console/application-details.ts b/packages/phrases/src/locales/es/translation/admin-console/application-details.ts
index 95313951a..16d321f6c 100644
--- a/packages/phrases/src/locales/es/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/es/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/es/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/es/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/es/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/es/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/fr/translation/admin-console/application-details.ts b/packages/phrases/src/locales/fr/translation/admin-console/application-details.ts
index a71af67a0..9ba756785 100644
--- a/packages/phrases/src/locales/fr/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/fr/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/fr/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/fr/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/fr/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/fr/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/it/translation/admin-console/application-details.ts b/packages/phrases/src/locales/it/translation/admin-console/application-details.ts
index ff73588f0..78884e239 100644
--- a/packages/phrases/src/locales/it/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/it/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/it/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/it/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/it/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/it/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ja/translation/admin-console/application-details.ts b/packages/phrases/src/locales/ja/translation/admin-console/application-details.ts
index f4382eae9..5bee6617f 100644
--- a/packages/phrases/src/locales/ja/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/ja/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ja/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/ja/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/ja/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/ja/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ko/translation/admin-console/application-details.ts b/packages/phrases/src/locales/ko/translation/admin-console/application-details.ts
index 87ea84dfc..fcaad8293 100644
--- a/packages/phrases/src/locales/ko/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/ko/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ko/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/ko/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/ko/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/ko/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pl-pl/translation/admin-console/application-details.ts b/packages/phrases/src/locales/pl-pl/translation/admin-console/application-details.ts
index 211046ef0..e87d1f7b4 100644
--- a/packages/phrases/src/locales/pl-pl/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/pl-pl/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pl-pl/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/pl-pl/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/pl-pl/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/pl-pl/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pt-br/translation/admin-console/application-details.ts b/packages/phrases/src/locales/pt-br/translation/admin-console/application-details.ts
index d0dce4268..63bbc4bfc 100644
--- a/packages/phrases/src/locales/pt-br/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/pt-br/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pt-br/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/pt-br/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/pt-br/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/pt-br/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pt-pt/translation/admin-console/application-details.ts b/packages/phrases/src/locales/pt-pt/translation/admin-console/application-details.ts
index d19b13813..5825f7540 100644
--- a/packages/phrases/src/locales/pt-pt/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/pt-pt/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pt-pt/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/pt-pt/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/pt-pt/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/pt-pt/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ru/translation/admin-console/application-details.ts b/packages/phrases/src/locales/ru/translation/admin-console/application-details.ts
index aecac7eae..8d99fea4e 100644
--- a/packages/phrases/src/locales/ru/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/ru/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ru/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/ru/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/ru/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/ru/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/tr-tr/translation/admin-console/application-details.ts b/packages/phrases/src/locales/tr-tr/translation/admin-console/application-details.ts
index de5c8dd12..046413be1 100644
--- a/packages/phrases/src/locales/tr-tr/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/tr-tr/translation/admin-console/application-details.ts
@@ -89,7 +89,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/tr-tr/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/tr-tr/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/tr-tr/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/tr-tr/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-cn/translation/admin-console/application-details.ts b/packages/phrases/src/locales/zh-cn/translation/admin-console/application-details.ts
index 8968aaf41..e71c2dbd9 100644
--- a/packages/phrases/src/locales/zh-cn/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/zh-cn/translation/admin-console/application-details.ts
@@ -87,7 +87,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-cn/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/zh-cn/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/zh-cn/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/zh-cn/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-hk/translation/admin-console/application-details.ts b/packages/phrases/src/locales/zh-hk/translation/admin-console/application-details.ts
index ba0768eda..3ec38ce68 100644
--- a/packages/phrases/src/locales/zh-hk/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/zh-hk/translation/admin-console/application-details.ts
@@ -87,7 +87,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-hk/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/zh-hk/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/zh-hk/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/zh-hk/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-tw/translation/admin-console/application-details.ts b/packages/phrases/src/locales/zh-tw/translation/admin-console/application-details.ts
index 801e73ecd..86986356a 100644
--- a/packages/phrases/src/locales/zh-tw/translation/admin-console/application-details.ts
+++ b/packages/phrases/src/locales/zh-tw/translation/admin-console/application-details.ts
@@ -88,7 +88,7 @@ const application_details = {
     'Feel free to utilize your domain <domain>{{domain}}</domain> which is permanently valid.',
   /** UNTRANSLATED */
   origin_url_tip:
-    "Enter primary website address of your application, excluding any '/routes'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+    "Enter primary website address of your application, excluding any '/pathname'.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
   /** UNTRANSLATED */
   custom_rules: 'Custom authentication rules',
   /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-tw/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/zh-tw/translation/admin-console/protected-app.ts
index d007c46da..8d424e297 100644
--- a/packages/phrases/src/locales/zh-tw/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/zh-tw/translation/admin-console/protected-app.ts
@@ -34,7 +34,7 @@ const protected_app = {
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
     url_field_tooltip:
-      "Enter primary website address of your application, excluding any '/routes'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
+      "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
     create_application: 'Create application',
     /** UNTRANSLATED */
@@ -51,7 +51,7 @@ const protected_app = {
       url_required: 'Origin URL is required.',
       /** UNTRANSLATED */
       invalid_url:
-        "Invalid Origin URL format: Use http:// or https://. Note: '/routes' is not currently supported.",
+        "Invalid Origin URL format: Use http:// or https://. Note: '/pathname' is not currently supported.",
     },
   },
   /** UNTRANSLATED */