Exchange OAuth authorization code for application JWT after validating state, nonce, and ID token signature. User is retrieved from or created in the database and details added to the JWT.
Request to exchange OAuth code for JWT
Authorization code returned by the OAuth provider after user consent
State token from the initial auth request, used for CSRF protection
Error code if OAuth provider returned an error instead of authorization code
PKCE code verifier that corresponds to the code_challenge sent in the authorization request