curl --request POST \
  --url https://{appId}.session.prelude.dev/v1/session/login/finalize \
  --header 'Content-Type: application/json' \
  --data '
{
  "challenge_token": "<string>",
  "code_verifier": "<string>"
}
'

{
  "access_token": "<string>",
  "expires_at": 123
}