You might be thinking, “Why are there two steps to get the access token? Why do we need to first get the authorization code and then exchange it with the access token?”
I don’t understand that part explanation. Can someone please explain?
cc: @Educative_Team
Course: https://www.educative.io/courses/web-security-access-management-jwt-oauth2-openid-connect
Lesson: https://www.educative.io/courses/web-security-access-management-jwt-oauth2-openid-connect/B8yyLjE469x