Quoting from reddit:
How is it going to break? Music Assistant dealt with the issue it seems. Most oauth providers don't allow redirect to non-HTTPS endpoints, so this is a very common restriction. It's why do many of the oauth connections redirect to https://my.home-assistant.io/ - to provide the "secure redirect" required.