invalid grant

curl -s -X POST https://yourdomain.oktapreview.com/oauth2/v1/token
.../...

{
 "error": "invalid_grant",
 "error_description": "The authorization code is invalid or has expired."
}

grant_type=authorization_code

TO TEST connection:

curl -s -X POST https://<OKTA_DOMAIN>/oauth2/v1/token \
       -d "grant_type=authorization_code" \
       -d "code=invalid-test" \
       -d "client_id=<CLIENT_ID>" \
       -d "client_secret=<CLIENT_SECRET>" \
       -d "redirect_uri=https://placeholder/callback" | jq

invalid_grant is a valid response

invalid_client
invalid_request

See also

• 400 Bad Request
• /token, Decode token: iss, /userinfo, /authorize, token_endpoint_auth_method, token_type, Bearer, invalid_grant, invalid_client, /.well-known/openid-configuration, /oauth2/v1/token, Token metadata