{ status: 400, message: 'Invalid authorization code' } (OAuth authorization code flow)

access_token and token are used interchangably

code is used to exchange for a token / access_token

That resulant access_token is what you store in your session and recall from the session for subsequent requests

1 Like