Glossary: Web App Security and Authentication

Authorization code flow

Also written: code flow

The OAuth flow where the browser carries a one-time code back from the provider and kc-shop's server swaps it for tokens. It uses state and PKCE for safety.