curl --fail-with-body --max-time 30 -X POST 'https://app.reflections.ai/oauth/token' \
  -H "Content-Type: application/x-www-form-urlencoded" \
  --data-urlencode 'grant_type=authorization_code' \
  --data-urlencode 'code=ac_8Xgcqs0ZRUe0M57eyADP9yT4' \
  --data-urlencode 'redirect_uri=http://127.0.0.1:33418/oauth/callback' \
  --data-urlencode 'code_verifier=6l_CpK7wrBmjR_geDznNZuKR9du8tNl4p8wxTb6jJ9o' \
  --data-urlencode 'client_id=cl_ra8t5tsberxpax0351jdyqgrb7' \
  --data-urlencode 'resource=https://app.reflections.ai/mcp'

import { exit } from "node:process";

const response = await fetch("https://app.reflections.ai/oauth/token", {
  method: "POST",
  headers: {
    "Content-Type": "application/x-www-form-urlencoded",
  },
  body: new URLSearchParams({
    "grant_type": "authorization_code",
    "code": "ac_8Xgcqs0ZRUe0M57eyADP9yT4",
    "redirect_uri": "http://127.0.0.1:33418/oauth/callback",
    "code_verifier": "6l_CpK7wrBmjR_geDznNZuKR9du8tNl4p8wxTb6jJ9o",
    "client_id": "cl_ra8t5tsberxpax0351jdyqgrb7",
    "resource": "https://app.reflections.ai/mcp"
  }),
  signal: AbortSignal.timeout(30_000),
});
const responseBody = await response.text();
if (!response.ok) {
  console.error(`HTTP ${response.status}: ${responseBody}`);
  exit(1);
}
console.log(responseBody);

from urllib.error import HTTPError
from urllib.parse import urlencode
from urllib.request import Request, urlopen

headers = {
    "Content-Type": "application/x-www-form-urlencoded",
}
data = urlencode({
    "grant_type": "authorization_code",
    "code": "ac_8Xgcqs0ZRUe0M57eyADP9yT4",
    "redirect_uri": "http://127.0.0.1:33418/oauth/callback",
    "code_verifier": "6l_CpK7wrBmjR_geDznNZuKR9du8tNl4p8wxTb6jJ9o",
    "client_id": "cl_ra8t5tsberxpax0351jdyqgrb7",
    "resource": "https://app.reflections.ai/mcp",
}).encode("utf-8")
request = Request("https://app.reflections.ai/oauth/token",
                  method="POST", headers=headers, data=data)
try:
    with urlopen(request, timeout=30) as response:
        print(response.read().decode("utf-8"))
except HTTPError as error:
    error_body = error.read().decode("utf-8")
    raise RuntimeError(f"HTTP {error.code}: {error_body}") from error

package main

import (
    "fmt"
    "io"
    "net/http"
    "net/url"
    "strings"
    "time"
)

func main() {
    form := url.Values{
        "grant_type": {"authorization_code"},
        "code": {"ac_8Xgcqs0ZRUe0M57eyADP9yT4"},
        "redirect_uri": {"http://127.0.0.1:33418/oauth/callback"},
        "code_verifier": {"6l_CpK7wrBmjR_geDznNZuKR9du8tNl4p8wxTb6jJ9o"},
        "client_id": {"cl_ra8t5tsberxpax0351jdyqgrb7"},
        "resource": {"https://app.reflections.ai/mcp"},
    }
    body := strings.NewReader(form.Encode())
    request, err := http.NewRequest("POST", "https://app.reflections.ai/oauth/token", body)
    if err != nil {
        panic(err)
    }
    request.Header.Set("Content-Type", "application/x-www-form-urlencoded")
    client := &http.Client{Timeout: 30 * time.Second}
    response, err := client.Do(request)
    if err != nil {
        panic(err)
    }
    defer response.Body.Close()
    responseBody, err := io.ReadAll(response.Body)
    if err != nil {
        panic(err)
    }
    if response.StatusCode < 200 || response.StatusCode >= 300 {
        panic(fmt.Sprintf("HTTP %d: %s", response.StatusCode, responseBody))
    }
    fmt.Print(string(responseBody))
}