Authorization code in case of 3 legged oauth flow

client_id of your app. Can be found under 'my apps'

client secret of your app. Can be found under 'my apps'

should always be either authorization_code or refresh_token

optional