...
scope one or more registered scopes. If not specified, a token for all explicitly allowed scopes will be issued.
resource an API resource. Will return an access token with the audience claim set to this API. For retrieving multiple access tokens in a authorization code flow, the first request is made with the code, while subsequent requests must be made with the refresh token.
redirect_uri required for the authorization_code grant type
...