2019-09-07 UTC
# 
OokOok|2 Is there a document somewhere discussing the design rationale for having both authorization codes and access tokens? It's unclear to me the purpose the latter serves that the former cannot. Is it just an artefact of OAuth's design?