Getting authorization token within url fragment

The south token? What is “south token”?

The ?code= is valid for one exchange to an access token.

Then you may store and use the access token (and it’s refresh token)
You can use the refresh token to generate a new token if/when the access token expires.