Builder

The client identifier (ARN) used during Sign-In onboarding Required for both authorization code and refresh token flows

The authorization code received from /v1/authorize Required only when grant_type=authorization_code

PKCE code verifier to prove possession of the original code challenge Required only when grant_type=authorization_code

OAuth 2.0 grant type - determines which flow is used Must be "authorization_code" or "refresh_token"

The redirect URI that must match the original authorization request Required only when grant_type=authorization_code

The refresh token returned from auth_code redemption Required only when grant_type=refresh_token