{ status: 400, message: 'Invalid authorization code' } (OAuth authorization code flow)

I think I’m confused between the different names : access_token, code, token… I’ll keep looking