Processes the user's consent decision (approve or deny). The Host Tools consent page calls this; your app never needs to.
On approval, generates an authorization code and returns the client's redirect_uri with the code (and state) added. On denial, the returned URL carries error=access_denied instead. The consent page then sends the browser to that URL, so your redirect_uri may redirect again (to your app's dashboard, for example).