Hi again @Tom.
Unfortunately, we don’t support wildcards for the port in loopback callback URLs. You are correct in that this should be supported, so I’ll add a feature request on your behalf at Auth0: Secure access for everyone. But not just anyone..
I’ll link directly to this topic, as your user case and explanation are perfectly clear.