As explained in step 5 of the flow, it's an HTTPS call to Google.
To exchange an authorization code for an access token, call the https://www.googleapis.com/oauth2/v4/token endpoint
↧
Answer by Jay Lee for How does "auth code and access/refresh token" exchange happens in Google oAuth flow
↧
