Access token always invalid

https://id.twitch.tv/oauth2/authorize?client_id=${CLIENT_ID}&redirect_uri=${REDIRECT}&response_type=code&scope=bits:read+channel:read:subscriptions

And the json response I get back reflects that.

{
  "access_token": "...",
  "refresh_token": "...",
  "scope": [
    "bits:read",
    "channel:read:subscriptions"
  ],
  "token_type": "bearer"
}