Index: CHANGELOG.md
===================================================================
--- CHANGELOG.md	(revision dd568e79b476d730bac4264e3e6d0bab5cfb9753)
+++ CHANGELOG.md	(revision bf72108b0805b6f9d9780ea0ffef023a60b86f4d)
@@ -26,4 +26,10 @@
 
 ### Fixed
+- **OAuth consent now hands off reliably to native apps.** After Allow/Deny, a
+  redirect to a native custom scheme (e.g. `com.klonkt.shaer:/oauth`) was a plain
+  302, which mobile browsers silently drop. The consent step now serves a tiny
+  interstitial for non-http redirect URIs that auto-forwards and offers an "Open
+  the app" tap link (a tap reliably launches the app on Android; iOS's web-auth
+  session intercepts either way). Web (http/https) clients still get a 302.
 - **Visitors can reply to the site owner's own comments.** The "reply via the
   fediverse" button only appeared on comments from others; the site's own