How did you get the code via OAUTH via Postman? I was getting ERR_403_CORS_ORIGIN_DENIED error and got the solution after reading:
Are you aware of any native clients which I use for testing? Reason I am asking it, I am not aware what infusion soft uses to differentiate browser based and non-browser based token requests