Can the wildcard be in the path? We use the restful concept of identifiers in the path, and use that with all of our other OAuth2 flows, e.g.
(unencoded) redirect uri: http://localhost/api/1.0/company/12345/auth
The wildcard can be placed anywhere in the redirect URI.
As a developer, I sort of hate it when people tell me the following:
Hey, it's happening to me too.
But...hey it's happening to me too and I don't want to resort to Cookies or Local Storage to try to manage state unless this is going to be a long time to fix. Without this capability it will be hard for us to know who we passed to constant contact. I am sure you get that.