Cloudflare/workers-OAuth-provider missing validation of redirect_URI (github.com)

Yep. I screwed this up. It's super-embarrassing because I had actually made a note to myself to verify this exact behavior and yet, somehow, I failed to do so.