Replying to @oidc6
aaaand this is why the Security BCP says to have an explicit list of redirect URIs and not allow wildcards 🤦‍♂️

Dec 3, 2019 · 2:20 PM UTC

1