Glossary: Identity and Access Management

authorization code

Also written: code

A short-lived, one-time code that the authorization server sends back to the app through the browser's redirect. The app then swaps it for tokens on the back channel. Codes work once and expire within about a minute.