From 0cc4b5e1e1ee15ddd10c3f95b36b82f56d947a5b Mon Sep 17 00:00:00 2001
From: Dan Chen <dchen@fitbit.com>
Date: Wed, 7 Sep 2016 16:36:44 -0700
Subject: [PATCH 1/2] redirect_uri should not be required for authorization
 code flow

---
 .../oltu/oauth2/as/validator/AuthorizationCodeValidator.java     | 1 -
 1 file changed, 1 deletion(-)

diff --git a/oauth-2.0/authzserver/src/main/java/org/apache/oltu/oauth2/as/validator/AuthorizationCodeValidator.java b/oauth-2.0/authzserver/src/main/java/org/apache/oltu/oauth2/as/validator/AuthorizationCodeValidator.java
index c6727671..9e4ace2a 100644
--- a/oauth-2.0/authzserver/src/main/java/org/apache/oltu/oauth2/as/validator/AuthorizationCodeValidator.java
+++ b/oauth-2.0/authzserver/src/main/java/org/apache/oltu/oauth2/as/validator/AuthorizationCodeValidator.java
@@ -35,7 +35,6 @@ public class AuthorizationCodeValidator extends AbstractValidator<HttpServletReq
     public AuthorizationCodeValidator() {
         requiredParams.add(OAuth.OAUTH_GRANT_TYPE);
         requiredParams.add(OAuth.OAUTH_CODE);
-        requiredParams.add(OAuth.OAUTH_REDIRECT_URI);
 
         enforceClientAuthentication = true;
     }

From ceffe755b9555c02c593150e2f6b7ad8229cc39f Mon Sep 17 00:00:00 2001
From: Dan Chen <dchen@fitbit.com>
Date: Wed, 7 Sep 2016 16:37:31 -0700
Subject: [PATCH 2/2] redirect_uri should not be required in implicit grant
 flow

---
 .../java/org/apache/oltu/oauth2/as/validator/TokenValidator.java | 1 -
 1 file changed, 1 deletion(-)

diff --git a/oauth-2.0/authzserver/src/main/java/org/apache/oltu/oauth2/as/validator/TokenValidator.java b/oauth-2.0/authzserver/src/main/java/org/apache/oltu/oauth2/as/validator/TokenValidator.java
index feea7b46..c7ce660d 100644
--- a/oauth-2.0/authzserver/src/main/java/org/apache/oltu/oauth2/as/validator/TokenValidator.java
+++ b/oauth-2.0/authzserver/src/main/java/org/apache/oltu/oauth2/as/validator/TokenValidator.java
@@ -38,7 +38,6 @@ public class TokenValidator extends AbstractValidator<HttpServletRequest> {
     public TokenValidator() {
         requiredParams.add(OAuth.OAUTH_RESPONSE_TYPE);
         requiredParams.add(OAuth.OAUTH_CLIENT_ID);
-        requiredParams.add(OAuth.OAUTH_REDIRECT_URI);
     }
 
     @Override