2021-10-12 UTC
# 
unrelentingtech <capjamesg[d]> "I am a bit confused about the..." <- when the user clicks allow, they get redirected to the client with a temporary code. the client can exchange the code either with the authorization-endpoint to only verify it and maybe get profile info, OR with the token-endpoint to also get a token that can be used to access resources like micropub/microsub on the site