What is <table><tbody><tr><td>grant_type</td><td>Specify ‘authorization_code’ to get the access token.</td></tr></tbody></table>
When you have a temporary token it can be converted to an access token by passing your client ID, client secret and the temporary token to the access_token endpoint. If the combination of client ID and temporary token are recognized, and the token is still valid, then a JSON response will be returned with the access token and the permissions that granted to the access token.
You must request access tokens with a POST request so that your client_secret and code are encrypted; GET parameters can be visible to users in some situations. The fields must be sent as multi-part form data in the body of the POST request (the Content-Type must be ‘multipart/form-data’).
The request to convert the temporary token to an access token should be made out of band to prevent visibility of your client secret.
The access token request endpoint is:
Below are the fields used in the payload sent to the access token end point: