The parameter code is the authentication code (or token) obtained from the social network after the oauth login (or social login if you prefer), which you need to validate: against their API, in Facebook case.