OAuth2 Pushed Authorization Requests allow the client to pre-register the
authorization params to the server directly. The Authorization server replies
with a unique request_uri that can be passed instead of specifying all auth
params in the redirect url. This reduces the length of the redirect URIs and
ensures scope parameters cannot be tampered with