Home Assistant fixes sign-ins opened through a Tailscale address, public IPv4 address or global IPv6 address. These routes could fail with Invalid client id because the login check accepted domain names and local addresses but rejected the interface’s own address.
The correction accepts an address whose protocol, host and port match the request, including the forwarded address from a trusted proxy. Existing checks binding the authorization response to the client’s redirect addresses remain in place.