Result of redeeming a short code (the backend mints a session + exchange token).
One-time exchange token to hand to the application's auth service.
ISO session expiry.
Result of redeeming a short code (the backend mints a session + exchange token).