The authorization_code that the application asked for. The app can utilize the authorization code to ask for an obtain token to the target source. Authorization codes are short lived. Typically, they expire just after about ten minutes. The focus on resource is invalid mainly because it won't exist, Microsoft Entra https://gregory8w5bq.blogrelation.com/38043679/5-simple-statements-about-tentenbet-domain-explained