That video is quite old. I just tried it on my server and it works ok. A few hints:
1. use response type `code`
2. use grant type `authorization_code`
3. only request the `openid` scope (which is default with dynamic client reg)
4. Remember that the code can only be used once
Below are is how I tested it:
```
Reg REQUEST:
------------
POST /oxauth/seam/resource/restv1/oxauth/register HTTP/1.1
Content-Type: application/json
Accept: application/json
Host: goblin.gluu.info
{
"redirect_uris": ["https://goblin.gluu.info/oxauth-rp/home.htm"],
"response_types": ["code"],
"grant_types": ["authorization_code"],
"application_type": "web",
"client_name": "oxauth-rp",
"subject_type": "public",
"frontchannel_logout_uri": [""],
"frontchannel_logout_session_required": "false"
}
REG RESPONSE:
-------------
HTTP/1.1 200
Date: Tue, 23 May 2017 02:40:16 GMT
Server: Jetty(9.3.15.v20161220)
Content-Length: 955
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
Pragma: no-cache
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=12ytgfh7enf6nalw6bqp27at3;Path=/oxauth;Secure;HttpOnly
Keep-Alive: timeout=5, max=100
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Type: application/json
Connection: Keep-Alive
Cache-Control: no-store
{
"client_id": "@!2E9F.AC40.7B61.9A41!0001!C18E.09A6!0008!1DEC.DA99.3A0D.C7D4",
"client_secret": "98c28d9f-efa7-429c-ae42-398760e2a55d",
"registration_access_token": "d266ca49-ac5c-4b4b-b598-c799a88034c1",
"registration_client_uri": "https://goblin.gluu.info/oxauth/seam/resource/restv1/oxauth/register?client_id=@!2E9F.AC40.7B61.9A41!0001!C18E.09A6!0008!1DEC.DA99.3A0D.C7D4",
"client_id_issued_at": 1495507216,
"client_secret_expires_at": 1495593616,
"redirect_uris": ["https://goblin.gluu.info/oxauth-rp/home.htm"],
"response_types": ["code"],
"application_type": "web",
"client_name": "oxauth-rp",
"subject_type": "public",
"id_token_signed_response_alg": "RS256",
"token_endpoint_auth_method": "client_secret_basic",
"require_auth_time": false,
"frontchannel_logout_uri": [""],
"frontchannel_logout_session_required": false,
"scopes": [
"openid",
"permission"
]
}
AUTHZ Form Values:
---------------
Response Type: code
ClientID: @!2E9F.AC40.7B61.9A41!0001!C18E.09A6!0008!1DEC.DA99.3A0D.C7D4
Scopes: openid
Redirect URL: https://goblin.gluu.info/oxauth-rp/home.htm
State: e25add2a
Nonce: 01715155717
Display: Page
TOKEN REQUEST:
--------------
POST /oxauth/seam/resource/restv1/oxauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: goblin.gluu.info
Authorization: Basic QCEyRTlGLkFDNDAuN0I2MS45QTQxITAwMDEhQzE4RS4wOUE2ITAwMDghMURFQy5EQTk5LjNBMEQuQzdENDo5OGMyOGQ5Zi1lZmE3LTQyOWMtYWU0Mi0zOTg3NjBlMmE1NWQ=
grant_type=authorization_code&code=b30cd190-7dd5-4e71-8b04-92e6fe922604&redirect_uri=https%3A%2F%2Fgoblin.gluu.info%2Foxauth-rp%2Fhome.htm&scope=openid
TOKEN RESPONSE:
---------------
HTTP/1.1 200
Date: Tue, 23 May 2017 02:46:38 GMT
Server: Jetty(9.3.15.v20161220)
Content-Length: 1147
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
Pragma: no-cache
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=3htmgdq7eqib1pnt7055bqpll;Path=/oxauth;Secure;HttpOnly
Keep-Alive: timeout=5, max=100
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Type: application/json
Connection: Keep-Alive
Cache-Control: no-store
{"access_token":"4fec76a4-f6b5-4aa6-96b4-ab51ebc61e40","token_type":"bearer","expires_in":299,"refresh_token":"d694c1a4-d95c-4b7c-a1e3-96c5feab129a","scope":"openid","id_token":"eyJraWQiOiIyNTNlNDYwNC1hODRjLTQyMGUtOTE0NC05YjlkM2RlYWY5MjQiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.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.NcPh4qxWKd-xFe5HKa8UiJu31WF-UXX0obl4AAPWaC5VfU-AGtl43NnvsTQoUXgfnae7y9OWcsylVEv0SRlXjbyhlFausSmsPIwmlPENJAFZLAZs8tv7G-P9rk2t3eB31YTX4hPiEk_T2nYT77MIh_9jBt-7mTftZIoG42Lr5F4U4nXTWHoVy2JrdlHebGEpfEFRl1nno7ytiQYhRNUR83hiSWpoh9SgBdoKMyUM-hr9YKnyZ7bdAYypSSGlJaza69mkCUO0O5Eo30YLr4wnFGvs5h0dNom4iaxtKVltqe4oKyG8XCVM8vBT56_OEzt0OHWijwkoqbRRt7XDTIVpBA"}
```