curl -v --ipv4 -X GET \

--url 'https://accounts.zoho.com/oauth/v2/auth?response_type=code&client_id=[CLIENT_ID]&scope=AaaServer.profile.Read&redirect_uri=https://my-real-domain.com/zohocallback.xhtml&prompt=consent&access_type=offline'

RESPONSE Location: https://accounts.zoho.com/signin?servicename=AaaServer&serviceurl=%2Foauth%2Fv2%2Fauth%3Fresponse_type%3Dcode%26client_id%[CLIENT_ID]%26scope%3DAaaServer.profile.Read%26redirect_uri%3Dhttps%253A%252F%252Fmy-real-domain.com%252Fzohocallback.xhtml%26prompt%3Dconsent%26access_type%3Doffline

Entered the response URL into a browser. 

Selected 'Accept' button

Get redirected to my real zoho callback url-

Use the grant token in the following POST -

curl -v --ipv4 -X POST \

--url 'https://accounts.zoho.com/oauth/v2/token?grant_type=authorization_code&client_id=[CLIENT_ID]&client_secret=[CLIENT_SECRET]&redirect_url=https://my-real-domain.com/zohocallback.xhtml&code=[GRANT_TOKEN]'

Response:

{"error":"invalid_code"}

I'm surely misinterpreting the instructions. Is it clear to anyone?

Thank you,

Ted S