OAuth callback result from authorization server
Authorization code from OAuth server
Optional
State parameter for CSRF protection
OAuth callback result from authorization server