Update: I have installed OAuth2 Server plugin and successfully used Postman to reach the endpoints. I will continue to test this.