Did I do the oauth2 authorization code flow correctly?

Question

Java

Hello! I wanted to know if I did the authorization code flow (wso2) correctly. Now it works like this:
front goes to login page -> enters login/password -> gets authorization code -> sends to back -> get access,refresh token by authorization code -> get userinfo using accesstoken -> set in principala context .