Required if grant_type is authorization_code
Required if grant_type is refresh_token
The access token