Each redirect URL must reference the callback handler in the corresponding client application that accepts the OAuth 2.0 authorization code when authenticating a user ("*" wildcards are also supported). If you do not specify any redirect-uris, SAP BTP automatically allows (trusts) the default URL of localhost/* (that is, any sub-path for any application running on a developer's local machine). You should only allow localhost in non-productive development landscapes. Client applications that only use client authentication do not need to be listed in the oauth2-configuration.
create a dedicated service instance per client application.
Glasp is a social web highlighter that people can highlight and organize quotes and thoughts from the web, and access other like-minded people’s learning.