capjamesgAnd to be clear, I can redeem `code` at _either_ /auth or /token?/auth says it's `me`, and `/token` lets me generate a Bearer token for the client? And the usage of the Bearer token is to call the /introspect endpoint to verify that a token is active?
