@mo https://www.rfc-editor.org/rfc/rfc6749#section-4.1.3
REQUIRED, if the "redirect_uri" parameter was l included in the authorization request as described in Section 4.1.1, and their values MUST be identical.