2018-07-11 UTC
# 
oodani hmm, checked the spec, and i think i'm okay? i do <link rel="redirect_uri"> verification and additionally *always* display the redirect uri for manual verification, so if anything i'm just losing out on the convenience of knowing a redirect uri on the same domain as the client id Should Always Be Valid