For the purposes of the callback field, an HTTP or HTTPS-based URL pointing at a non-twitter.com domain.
URLs of any protocol are welcome when dynamically setting oauth_callback on the request_token step, but a placeholder URL matching the above criteria needs to be supplied to the field on your application record.