From 5a4f3acae460ffb9f15e152d0bdabba540e85eaf Mon Sep 17 00:00:00 2001
From: Ginger <ginger@gingershaped.computer>
Date: Sat, 31 Oct 2026 00:22:15 -0400
Subject: [PATCH] chore: Changelog

---
 changelog.d/2421.bugfix.md | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 changelog.d/2421.bugfix.md

diff --git a/changelog.d/2421.bugfix.md b/changelog.d/2421.bugfix.md
new file mode 100644
index 000000000..f5c1e842d
--- /dev/null
+++ b/changelog.d/2421.bugfix.md
@@ -0,0 +1 @@
+Redirect URIs in OAuth clients' metadata are now properly validated to be on a subdomain of the OAuth issuer URL domain. Contributed by @ginger.