I’m using the oidc endpoints directly. So here’s my oauth link (I’ve sanitized some of the information).
https://dev-XXXXX.okta.com/oauth2/v1/authorize?idp=XXXX&client_id=XXXXXX&response_type=code&response_mode=fragment&scope=openid email phone profile &redirect_uri=https://{myUrl}/account/postauthorization&state=n10603y&nonce=localSecure
This request gets redirected to
/oauth2/v1/authorize?state=dytPUWNaZ0pzbVJtMzhPOSs0OFQrL1ZXZnRFU1RVT05LQlh4ZStXci9YQlVqSUhvSUhabEFlQ0JpeU4zck1sOQ&client_id=XXXXX&redirect_uri=https%3A%2F%2FXXXXX%2Foauth2%2Fv1%2Fauthorize%2Fcallback&response_type=code&display=page&scope=email+openid+profile+address+phone
