It can, look at the Authorization Code Flow tutorial:
https://auth0.com/docs/flows/guides/auth-code/call-api-auth-code