...зачем /oauth/token параметр redirect_uri, если оно никуда не редиректит а просто отвечает на POST-запрос?
@mo https://www.rfc-editor.org/rfc/rfc6749#section-4.1.3 REQUIRED, if the "redirect_uri" parameter was l included in the authorization request as described in Section 4.1.1, and their values MUST be identical.
Gregory's Server
@mo https://www.rfc-editor.org/rfc/rfc6749#section-4.1.3
REQUIRED, if the "redirect_uri" parameter was l included in the authorization request as described in Section 4.1.1, and their values MUST be identical.