Why might I receive an 'invalid_grant' error with an 'invalid code in request' error description?

This combination usually points to an issue with the authorization code or client credentials used during the authorization flow. The 'invalid code' part suggests the authorization code provided by the authorization server is either expired, revoked, or not associated with the client requesting the access token. It could also mean the code was tampered with.