You shouldn’t send grant_type
neither in params nor in headers. Those should be sent in body params then only it will work.
Url: https://login.microsoftonline.com/common/oauth2/v2.0/token
client_id
, scope
and redirect_uri
params can be sent as query params.
where as grant_type
, code
and client_secret
should sent in body params.
grant_type:authorization_code,
code: {code you got from the authorization step},
client_secret: ****