Errors
What the sign-in answers with when something is wrong.
invalid_scope: you asked for a permission the app did not register (new apps are held to their registered permissions). access_denied: the person said no. invalid_client: wrong App ID or secret, or the app was turned off or its domain is not verified yet. redirect_uri must match a registered return URL exactly.