{ status: 400, message: 'Invalid authorization code' }

API
4

Then you have either

  • not used the code in time, they have about 5 minutes to live
  • you have already used the code to exchange for a token, they are one use