Nevermind, it works as expected but the docs show 2 different API routes:
/admin/oauth/access_token
/admin/oauth/authorize
Running the one from the example is good.