Single-shot HTTP listener for OAuth authorization_code callbacks. Binds an ephemeral 127.0.0.1 port, accepts one connection, parses the GET <path>?<query>, returns the code and state.
authorization_code
GET <path>?<query>
code
state