AI engineering glossary · Web APIs HTTP
What is authorization code flow?
Authorization code flow: An OAuth 2.0 flow in which the user signs in at the authorization server, which redirects back to the app with a one-time code. The app's backend then swaps that code for tokens. Tokens never pass through the browser URL, so it is the recommended flow for web apps.
Authorization code flow: an example
After clicking 'Sign in with Google', your app receives ?code=abc and exchanges it for an access token.
Related terms
More Web APIs HTTP terms
- Basic authentication
- Bearer token
- Cache-Control
- Caching
- Circuit breaker
- Client credentials grant
- Client library
- Content-Type
Where you learn it
Authorization code flow is part of the AI Engineering Program, which teaches it with notes, a hands-on lab and an exam. The first lesson is free.