@Mikko De La Fuente-Oracle I've checked there's no additional white spaces anywhere. I've a question : "For how much time the authorization code that we get on hitting the authorization endpoint is valid ?" I've seen some videos where even if you wait for 8-10 secs, it gives invalid_grant error.