Full callback URL with ?code=...&state=... query parameters.
Pending authorization previously persisted by the host, looked up via the callback state query parameter.
OptionalclientConfidential client secret (server-side only). Required when pending.usesClientSecret is true.
Parameters for
exchangeCode.