complete

Reads the deep link your server sent back. Accepts the parameters in the query or the fragment, because which one you get depends on how the bounce was written.

A state mismatch is SignInOutcome.Failed, never a success: it means the callback did not come from the attempt this app started, and the only safe move is to throw the whole thing away.