Removing :// fixed it for me. I'm sure it used to work with these characters though, so something must have changed? Most of the time my users authorise with the Strava app using Oath. Occasionally though I get a user trying to authorise using ASWebAuthenticationSession, because they don't have the Strava app installed on their phone, and that's when I got this exception.