I am studying Salesforce Identity modules. I have few queries that I don't have clarity on. Please help to clarify. (Post #2).
Regarding OAuth 2.0 Web server flow
In OAuth 2.0 Web server flow, once the authorization code is received by the client system, it does does a POST callout passing the authorization code to get the access token. This is a POST callout, so what is the relevance of the redirect_uri ? The response is returned in JSON/XML/URL_encoded format for the callout. There is no redirection happen after that. So just wondering why is this param there?