The client ID provided in your client information set

A registered redirect URI where the user is going to be redirected to with the authorization code

The value "code" tells the authorization server that the authorization code flow is initiating

A space-separated list of scopes (URL encoded) the client is requesting access to

A random string, used to prevent CSRF attacks, that will be passed through untouched to the callback with the code

A random string, used to prevent replay attacks, that will be passed through untouched to the ID token