Redirect URI and GET /streams

However, it’s best to enter a URL on a domain under your control (or localhost) so malicious domain owners cannot request authorizations on your registered app.