Federation
Authorization Code
An Authorization Code is a temporary protocol artifact returned after successful authentication and later exchanged for tokens.
Definition
An Authorization Code is the intermediate result sent back to the client application after the user has authenticated with the authorization server. It is not itself the final user session proof; instead, it is exchanged at the token endpoint to obtain the actual tokens used by the application.
The Ariovis perspective
Tokens are part of an access architecture, not a substitute for identity governance or authorization. Their scope, lifetime, validation and revocation must match the risk of the API and user journey.
Related services
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.