access_token
in query string fragment instead of obtaining securecode
. It's indented for client-side apps use in order to access an API, typically as Web SPA applications. For more detailed information, read OAuth 2.0 specification.access_token
in query string fragment.