The authorization_code which the application requested. The application can use the authorization code to request an entry token for the focus on source. Authorization codes are small lived. Usually, they expire following about 10 minutes. Likewise, the Microsoft identity platform also prevents the use of customer credentials in all flows https://oliverd493mrm1.blogsumer.com/profile