From 322cb98f0cc5b3a33b99b0378403d51e191f6451 Mon Sep 17 00:00:00 2001
From: Worthing ~ <115107835+w-goog@users.noreply.github.com>
Date: Mon, 6 Jul 2026 15:34:31 -0700
Subject: [PATCH 1/2] Replace case range with explicit case labels in
 OIDTokenUtilities. Addresses issue #947.

---
 CHANGELOG.md                            | 3 +++
 Sources/AppAuthCore/OIDTokenUtilities.m | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fbdf4c663..de869ba15 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,6 @@
+# UNRELEASED
+- Replace case range with explicit case labels in OIDTokenUtilities. Addresses issue #947. ([#962](https://github.com/openid/AppAuth-iOS/pull/962))
+
 # 2.1.0
 - Add SwiftUI + Swift Package Manager sample app under `Examples/Example-iOS_Swift-SPM`. ([#952](https://github.com/openid/AppAuth-iOS/pull/952))
 - Removed external browser (Safari) fallback from `OIDExternalUserAgentIOS`. If `ASWebAuthenticationSession` fails to start (e.g., Guided Access is enabled), the authorization flow now fails with an error instead of opening an external browser. ([#954](https://github.com/openid/AppAuth-iOS/pull/954))
diff --git a/Sources/AppAuthCore/OIDTokenUtilities.m b/Sources/AppAuthCore/OIDTokenUtilities.m
index 3280c856c..9f9331f7e 100644
--- a/Sources/AppAuthCore/OIDTokenUtilities.m
+++ b/Sources/AppAuthCore/OIDTokenUtilities.m
@@ -61,7 +61,7 @@ + (NSString *)redact:(NSString *)inputString {
   switch(inputString.length){
     case 0:
       return @"";
-    case 1 ... 8:
+    case 1: case 2: case 3: case 4: case 5: case 6: case 7: case 8:
       return @"[redacted]";
     case 9:
     default:

From f9d8120412059204e443fafb5002c4cd1f54665a Mon Sep 17 00:00:00 2001
From: Worthing ~ <115107835+w-goog@users.noreply.github.com>
Date: Mon, 6 Jul 2026 15:57:52 -0700
Subject: [PATCH 2/2] Update CHANGELOG.md with correct PR ref.

---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index de869ba15..a9c07ca36 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,5 @@
 # UNRELEASED
-- Replace case range with explicit case labels in OIDTokenUtilities. Addresses issue #947. ([#962](https://github.com/openid/AppAuth-iOS/pull/962))
+- Replace case range with explicit case labels in OIDTokenUtilities. Addresses issue #947. ([#963](https://github.com/openid/AppAuth-iOS/pull/963))
 
 # 2.1.0
 - Add SwiftUI + Swift Package Manager sample app under `Examples/Example-iOS_Swift-SPM`. ([#952](https://github.com/openid/AppAuth-iOS/pull/952))