redirect_uri

RU: redirect_uri

The URI to which the OAuth authorization server redirects the user-agent after authorization, carrying the authorization code or error response. It must be registered in advance and validated by exact string matching; partial or wildcard matching creates open-redirect vulnerabilities that allow an attacker to capture authorization codes.