oauth-2.0 - openID Connect Oauth 中的重定向 url 和回调 uri 有什么区别？

Question

我试图学习如何在我的 Android 应用程序中实现 openID 连接，我遇到了两个术语 重定向 url 和 回调 uri，我无法以区分两者。具体有什么区别？

Answer 1

官方术语是“重定向端点”，参见:https://www.rfc-editor.org/rfc/rfc6749#section-3.1.2 :

3.1.2. Redirection Endpoint

After completing its interaction with the resource owner, the
authorization server directs the resource owner's user-agent back to
the client. The authorization server redirects the user-agent to theclient's redirection endpoint previously established with the
authorization server during the client registration process or when
making the authorization request.

The redirection endpoint URI MUST be an absolute URI as defined by[RFC3986] Section 4.3. The endpoint URI MAY include an
"application/x-www-form-urlencoded" formatted (per Appendix B) query
component ([RFC3986] Section 3.4), which MUST be retained when addingadditional query parameters. The endpoint URI MUST NOT include a
fragment component.

但是其他术语，如“重定向 URI”、“重定向 URL”、“重定向 URI”、“重定向 URL”、“回调 URL”和“回调 URI”等都可以互换使用，有些是因为在协议(protocol)字段中术语由于继承了 OAuth 2.0 之前的类似协议(protocol)的遗留术语，因此被缩短为 redirect_uri 等内容。