Glossary: Identity and Access Management

back channel

The direct, server-to-server call in which an app swaps the authorization code for tokens, adding its client secret. The tokens never pass through the browser.