Due to the nature of authorization flows, the redirect URI parameter for any client using the grant type “Authorization Code” is highly recommended. By defining a redirect URI, it helps lock down what domain can use OAuth 2.0 authorization and which can not.