curl --request POST \
  --url https://api.vegaminds.com/oauth/token \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data grant_type=authorization_code \
  --data 'code=<string>' \
  --data 'code_verifier=<string>' \
  --data 'redirect_uri=<string>' \
  --data 'client_id=<string>' \
  --data 'client_secret=<string>'

import requests

url = "https://api.vegaminds.com/oauth/token"

payload = {
    "grant_type": "authorization_code",
    "code": "<string>",
    "code_verifier": "<string>",
    "redirect_uri": "<string>",
    "client_id": "<string>",
    "client_secret": "<string>"
}
headers = {
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/x-www-form-urlencoded"
}

response = requests.post(url, data=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    Authorization: 'Basic <encoded-value>',
    'Content-Type': 'application/x-www-form-urlencoded'
  },
  body: new URLSearchParams({
    grant_type: 'authorization_code',
    code: '<string>',
    code_verifier: '<string>',
    redirect_uri: '<string>',
    client_id: '<string>',
    client_secret: '<string>'
  })
};

fetch('https://api.vegaminds.com/oauth/token', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "access_token": "ACCESS_TOKEN",
  "token_type": "Bearer",
  "expires_in": 3600,
  "refresh_token": "REFRESH_TOKEN",
  "scope": "contacts:read notes:write"
}

{
  "error": "invalid_grant",
  "error_description": "The refresh token is invalid, expired or revoked."
}

{
  "error": "invalid_client",
  "error_description": "Client authentication failed: unknown client_id or wrong client_secret."
}