OptionalaccessAccess token returned directly by implicit or hybrid flows.
OptionalcodeAuthorization code returned when using the Authorization Code Flow.
OptionalerrorError code returned when authorization fails.
OptionalerrorHuman-readable description providing additional information about the authorization error.
OptionalexpiresLifetime of the access token in seconds.
OptionalidID token issued by the authorization server.
OptionalrefreshRefresh token issued during authorization (if enabled).
OptionalsessionOIDC session state value used for session monitoring and front-channel session management.
OptionalstateThe state value originally sent in the authorization request. Used to validate request integrity and prevent CSRF attacks.
Parameters returned to the application after the authorization server redirects the user back to the callback URL.