> redirect jacking, such as may be the case with custom schemes on mobile, you're hosed. How is this possible, any examples? > intents (on Android) and OS pin

> redirect jacking, such as may be the case with custom schemes on mobile, you're hosed. How is this possible, any examples? > intents (on Android) and OS pinning in the client configuration of your authorization server. Can you please elaborate?