OAuth 2.0 flow explained simply

I'm implementing OAuth 2.0 for my app but the flow is confusing.

Can someone explain:

1. Authorization Code flow (with PKCE)
2. When to use which grant type
3. What are access tokens vs refresh tokens
4. How does the token refresh work?

A diagram would be helpful!