code: def do_link_auth_flow(session_params=None, force_new_client=False):
      
      session_params = session_params or {}
  
      # get the ConfidentialApp client object
      auth_client = internal_auth_client(
          requires_instance=True, force_new_client=force_new_client
      )
  
      # start the Confidential App Grant flow
      auth_client.oauth2_start_flow(
          redirect_uri=auth_client.base_url + "v2/web/auth-code",
          refresh_tokens=True,
          requested_scopes=SCOPES,
      )
  
      # prompt
      additional_params = {"prompt": "login"}
      additional_params.update(session_params)
      linkprompt = "Please authenticate with Globus here"
      safeprint(
          "{0}:\n{1}\n{2}\n{1}\n".format(
              linkprompt,
              "-" * len(linkprompt),
              auth_client.oauth2_get_authorize_url(additional_params=additional_params),
          )
      )
  
      # come back with auth code
      auth_code = click.prompt("Enter the resulting Authorization Code here").strip()
  
      # finish auth flow
      exchange_code_and_store_config(auth_client, auth_code)
      return True
docs: Prompts the user with a link to authenticate with globus auth
      and authorize the CLI to act on their behalf.