Scan the OAuth2 exchange code