Token

Exchange an authorization code for an access token + refresh token, or rotate a refresh token. RFC 6749 §3.2 + RFC 7636 (PKCE).