Callback Inspector

Read the returned query parameters, replay the token exchange through the local proxy, and inspect the resulting JWT claims.