diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 704f378d9f647f76d6a19c0a9ee3987c53b31488..5bd037e66c71a6baa21feac768315f57f4d78482 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -13,6 +13,7 @@ Fixed
 ~~~~~
 
 * GroupManager.get_queryset() returned an incomplete QuerySet
+* OAuth was broken by a non-semver-adhering django-oauth-toolkit update
 
 Changed
 ~~~~~~~
diff --git a/pyproject.toml b/pyproject.toml
index a8a4a7fcc9da6a40bbc0fd6e80d25599caf40fd0..dc1f7c074cc9551187dc37513f4d68549b7b0452 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -105,7 +105,7 @@ django-allauth = "^0.47.0"
 django-uwsgi-ng = "^1.1.0"
 django-extensions = "^3.1.1"
 ipython = "^7.20.0"
-django-oauth-toolkit = "^1.5.0"
+django-oauth-toolkit = "~1.5.0"
 django-redis = "^5.0.0"
 django-storages = {version = "^1.11.1", optional = true}
 boto3 = {version = "^1.17.33", optional = true}