I just asked Chat GPT how Oauth flow works and more importantly a specific detail about whether the service provider makes an external http request to the authorization service with the access code to retrieve and access token