curl --request POST \
  --url https://api.thefaithapp.com/v1/auth/token \
  --header 'Content-Type: application/json' \
  --data '
{
  "client_key": "your-client-api-key",
  "code": "one-time-code",
  "redirect_uri": "https://example.com/auth/callback"
}
'

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({
    client_key: 'your-client-api-key',
    code: 'one-time-code',
    redirect_uri: 'https://example.com/auth/callback'
  })
};

fetch('https://api.thefaithapp.com/v1/auth/token', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.thefaithapp.com/v1/auth/token"

payload = {
    "client_key": "your-client-api-key",
    "code": "one-time-code",
    "redirect_uri": "https://example.com/auth/callback"
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "token_type": "Bearer",
  "access_token": "member-bearer-token",
  "expires_in": null,
  "member": {
    "id": 123,
    "uuid": "member-user-id",
    "name": "Jane Doe",
    "email": "jane@example.com",
    "client_id": 45
  }
}

{
  "message": "Invalid or expired authorization code.",
  "error": "Invalid or expired authorization code.",
  "errors": {}
}

{
  "message": "Redirect URL is not allowed for this client.",
  "error": "Redirect URL is not allowed for this client.",
  "errors": {}
}

{
  "message": "Client not found.",
  "error": "Client not found.",
  "errors": {}
}

{
  "message": "The code field is required.",
  "error": "The code field is required.",
  "errors": {}
}