Parameter	Description
Code	The code sent to you, as described at the start of Step 3.
Grant Type	authorization_code (static)
Redirect Uri	Must match one of your redirect uris setup in the third-party application
Client Id	Your third-party client Id
Client Secret	Your third-party client secret
Code Verifier	The code_verifier generated in Step 2 whose SHA-256 hash you sent as code_challenge. Required for strict-mode applications - Auth0 rejects the exchange with invalid_grant if it does not match.