I am implementing a personal project that uses the Google SDM API.
In this page Google describes the authorization flow for the API.
The authorization code is used to obtain the initial access and refresh tokens.