oAuth2 connection - Cornerstone(CSOD)

Yes, basically you need to repeat the call, first time using your initial endpoint URL and subsequent times using 'next link' returned to you by the API, repeat until you either get no data or no 'next link'. This is rather common scenario, 'pagination', API providers use it to even-out the load from large requests.

We have an article about how to deal with such cases