reclaDevel bypasses authUrls check

[kebetsi]

It is an undocumented feature that does the same as the authUrl parameter in the auth request flow, but it overrides the authUrls check. source
In case you use a url that is included in a trusted app url, you can bypass this check.