Can I use wildcard redirect URIs with OAuth?

I’m building loginos, a sign-in service for products that run on more than one domain. This question comes up a lot, so here is the full answer: the general approach first, then how loginos handles it. Short answer: Usually not, and you shouldn’t rely on them. RFC 9700, the OAuth 2.0 Security Best Current Practice, requires authorization servers... Weiterlesen: Can I use wildcard redirect URIs with OAuth?