Hello @Andrew Or , you're right. The data after the = sign is not valid JWT or JSON. It's a code
meant to be exchanged by an access token trough the /token
endpoint as part of the OAuth 2.0 authorization code flow. For information on how to use the aforementioned and obtain an access token, take a look to Get an access token.
Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.