The authorization code returned by the application after permission is granted in the application OAuth page (after clicking on the AuthURL).
The redirect URL that is specified in the AuthURL and the application client.