Exploring refresh tokens

Construct a login link using the authorization code flow, with the offline_access scope so the response includes a refresh token.

Create the login link

What do I want to get back? code means authorization code
The client identifier
What do I want to have access to? Can be any of openid email profile phone employee_info api offline_access. The openid scope is required.
Should the authorization server prompt me to reauthenticate and consent again? Options: none, login, consent, select_account.
Opaque value used to maintain state between the request and the callback.
Value used to associate a client session with an ID token, and to mitigate replay attacks.
Send the token response as a form post instead of a fragment encoded redirect.
Where the authorization server sends the browser back to after login.