MB-R122
The authorization server validates redirect URIs based on a client-specific allowlist of pre-registered URIs using exact string comparison.