@spec authorize(params :: [{:value, String.t()}] | [{:refresh_token, String.t()}]) ::
  {:error,
   %Boruta.Oauth.Error{
     error: :invalid_access_token,
     error_description: String.t(),
     format: nil,
     redirect_uri: nil,
     state: term(),
     status: :unauthorized
   }}
  | {:ok,
     %Boruta.Oauth.Token{
       client: term(),
       code_challenge: term(),
       code_challenge_hash: term(),
       code_challenge_method: term(),
       expires_at: term(),
       inserted_at: term(),
       nonce: term(),
       redirect_uri: term(),
       refresh_token: term(),
       refresh_token_revoked_at: term(),
       resource_owner: term(),
       revoked_at: term(),
       scope: term(),
       state: term(),
       sub: term(),
       type: term(),
       value: term()
     }}