mashery/iodocs — pull request #111 by zhendershot (2013-08-22 14:47:07+00:00)
Title: Invalid redirect_uri in token request

When requesting the Access token from the token URL via the authorization-code flow, the initial redirect_uri is stored in redis. The specified redirect_uri when making the token call should be the same as the intially set redirect (/oauth2Success/). A provider doing a check on the redirect_uri will reject token request