provider-routed-code-exchange

In a multi-provider OAuth service, all provider clients shared one state store. Exchanging the callback code with an arbitrary client was incorrect because token endpoints/auth methods differ per prov...