OAuth2Strategy.authorizationCodeGrant()