OpenAPI documentation should be completed (decide between inline swagger-jsdoc and a .yaml file). Currently stuck on implementing the PKCE OAuth2 flow (swagger-ui appears to only support the client credentials flow which requires a secret key).