Programmatically extend allowed URI schemes for OAuth2

[madprime]

Apps in Android and iOS use redirect URIs with registered schema to enable OAuth2 interactions. The current solution is hard-coding the whitelist for these in settings – something more programmatic should occur. See: a398b587