authorize(%{
  value: String.t(),
  redirect_uri: String.t(),
  client: Boruta.Oauth.Client.t(),
  code_verifier: String.t()
}) ::
  {:error,
   %Boruta.Oauth.Error{
     error: :invalid_code,
     error_description: String.t(),
     format: nil,
     redirect_uri: nil,
     status: :bad_request
   }}
  | {:ok,
     %Boruta.Oauth.Token{
       client: term(),
       code_challenge: term(),
       code_challenge_hash: term(),
       code_challenge_method: term(),
       expires_at: term(),
       id: term(),
       inserted_at: term(),
       redirect_uri: term(),
       refresh_token: term(),
       resource_owner: term(),
       revoked_at: term(),
       scope: term(),
       state: term(),
       sub: term(),
       type: term(),
       value: term()
     }}