Authorization code from an actual OAuth2 Authorization Server, or SimpleAuthorizationService.authorize