Step 2: User approves authorization - creates code and redirects back

This operation requires an authentication scheme, Authorization, that can't be read, so its parameters and responses are not shown here. They are in the OpenAPI document.