why authorization code is necessary in authorization-grant-type
<p>I am new to OAuth and was wondering why authorization code is required?</p>

<p>Why authorization does not send access token or refresh token in callback response.</p>

<p>why not directly access token?</p>