1. Common Oauth2 flow:
see: https://auth0.com/docs/get-started/authentication-and-authorization-flow/authorization-code-flow
2. PKCE for App:
see: https://auth0.com/docs/get-started/authentication-and-authorization-flow/authorization-code-flow-with-proof-key-for-code-exchange-pkce