issue_code must also be evaluated explicitly after authorize_code_request.