Google OAuth's strict redirect URI matching: A guide for multi-tenant apps

Google enforces exact-match redirect URIs with no wildcards and no exceptions. Here’s how to handle that cleanly when every customer has their own domain.