After you get the code (as shown above), are you requesting the OAuth token? POST to the oauth2/token endpoint with the body parameters?
After you get the code (as shown above), are you requesting the OAuth token? POST to the oauth2/token endpoint with the body parameters?