The authorization end point is typically URI on the authorization server in which the resource owner logs in and permits to access the data to the client application.

The authorization response can be used to get the access token for accessing the owner resources in the system using the authorization code.

The authorization server responds with a HTTP 400 or 401 (bad request) status codes, if an error occurs during authorization.