Access token retrieval (with code) or refresh (with refresh token)

POST {{baseUrl}}/oauth2/token