Once you have sent the user through the authorization end point and they have returned with a code,
you can use that code to retrieve and access token for that user. The redirect uri and state
(if passed) will need to be the same as in the in /v2/oauth2/authorize step