title: OAuth2 difference between callback url and redirect url?
body: <p>I am confused how OAuth2 takes you through an entire flow and redirects you back to the page.</p>
  
  <p>For example, I have an auth endpoint: <code>/auth/authorize</code>, callback endpoint <code>/auth/callback</code>,
  and token endpoint: <code>/auth/token</code></p>
  
  <p><code>/auth/authorize</code> gives back the authorize <code>code</code>, redirects to the <code>/auth/callback?code=mycode</code>, but how does this smoothly grab the <code>access_token</code> and redirect the user to the original page?</p>
  
  <p>Should my <code>/auth/callback</code> redirect to my <code>/auth/token</code> or something? And then <code>/auth/token</code> redirects back to the page?</p>