The authorize URI on the authorization server is where an OAuth 2.0 flow starts. The redirect URI tells the issuer where to redirect the browser back to when the flow is done. Every client (website or mobile app) is identified by a client ID. Unlike a client secret, the client ID is a public value that does not have to be protected. Clients can request additional information or permissions via sco
![OAuth 2.0 debugger](https://cdn-ak-scissors.b.st-hatena.com/image/square/29561ef7770aefff97fcf592ad4f2305059fc16c/height=288;version=1;width=512/https%3A%2F%2Foauthdebugger.com%2Fimages%2Fgear-sm.png)