post https://example.com/OAuth2/Token
- Client invokes this endpoint to exchange the access code for an access token by passing the full redirect URI in the redirect_uri parameter using form serialization.
- The access code is specified in the URI's code query parameter and the grant_type is set to authorization_code
- See the OAuth2 spec https://oauth.net/2/