|
```text
code
REQUIRED. The authorization code generated by the
authorization server. The authorization code MUST
expire shortly after it is issued to mitigate the
risk of leaks. A maximum authorization code
lifetime of 10 minutes is RECOMMENDED. The client
MUST NOT use the authorization code
```
RFC 6749
|