see https://auth0.com/docs/get-started/authentication-and-authorization-flow/authorization-code-flow-with-pkce
This mode is configurable from all-in-one The redirect path rd is stored with state