This is a known bug in how swagger's documentation generator works with token/accessCode based auth. Please scroll down and use the second method, "implicit". The actual flow works correctly.