Добрый, подскажите с Doorkeeper, куда копать? есть resource_owner_from_credentials do |_routes|

Question

Добрый, подскажите с Doorkeeper, куда копать? есть resource_owner_from_credentials do |_routes|

user = User.find_for_database_authentication(email: params[:username])
user if user&.valid_password?(params[:password])
end
делаю так:
curl -X POST -d "grant_type=password&email=carissa-@the.com&password=password&client_id=4R6oeTJisu3GLSCNp4XURojyjTv...&client_secret=AqSaP9Y_kNrqCreench9Ne..." -Ss http://127.0.0.1:3000/oauth/token

выходит ошибка:
{"error":"invalid_grant","error_description":"The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."}

client_id u secret брал вроде из подходящего application (Web Dev)