Does Facebook Login validate redirect URIs before TLS certificate verification?
I need to determine the order in which Facebook Login validates OAuth redirect URIs and TLS server certificates during the authorization-code flow. The App Dashboard requires exact redirect-URI matches, while certificate validation is delegated to the operating-system or SDK trust store. Facebook documentation does not state whether an unregistered redirect