Support multiple callback_uris when registering the app

[kkostov]

https://docs.joinmastodon.org/spec/oauth/#gotchas

[davidgarywood]

Wondering out loud, but, is this resolved now, as of the PixelFed PR?

[kkostov]

This is unrelated to PixelFed.

It is the endpoint used by apps to register and obtain a client id and secret.

When an app is registered, it should be able to provide multiple callback URLs with which to later authenticate. Fo example, consider a client shared between iOS and Web, or macOS and iOS, or iOS and Android… Ideally, the app will register only once and allow the user to authenticate with a callback URI specific to each platform.

There is more info in the description for the callback_uri field here.

In the current situation, we only accept 1 callback URL. The desired situation is that an app can specify multiple, so it can reuse its client registration when appropriate.