fix alloc typo, handle non-200 status code
ignore callback url if open link action is disabled