Why does the authenticator mode in oauth2 have to go to the resource server to obtain a code before obtaining the token, and then use the code of the resource server to apply for token? from the resource server after reading a lot of materials, it is ...