controller_oauth2_access_token
Exchange OAuth 2.0 credentials for a bearer access token.
The JSON endpoint supports the authorization_code and client_credentials
grant types. It validates the client id and secret, and for authorization codes
also the code and redirect URI. Successful responses contain the token type,
user id, user data, and expires_in when applicable.