Function validate_document 

fn validate_document(
    document: &ClientMetadataDocument,
    client_id: &str,
) -> Result<(), String>

Redirect URIs are left to the database’s is_valid_oauth_uri, the one rule for every client.