I realized that I dislike the OAuth Client ID Metadata document that's supposed to supersede the Dynamic OAuth Client Registration mechanism:
https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/
The first complain is that it seems to address only online clients - ie, to be able to determine an attempt at OAuth authorization has a valid client, its ID needs to be a document that's addressable on the web and returns valid metadata.
So offline clients are left to invent some static web metadata storage for themselves, which frankly is not feasible.
1/2
