token_request

@app.route('/geneplaza/login', methods=['GET', 'POST'])
@login_required
def geneplaza_login():
    scopes = app.config['DEFAULT_SCOPES']
    redirect_uri = app.BASE_CLIENT_URL + 'geneplaza/auth'
    client_id = app.config['GENEPLAZA_CLIENT_ID']
    submit_url = f"https://www.geneplaza.com/api/auth?response_type=code&client_id={client_id}&redirect_uri={redirect_uri}&scope=dataset"
    return redirect(submit_url)


@app.route('/geneplaza/auth', methods=['GET'])
@login_required
def geneplaza_auth():
    username = current_user.get_id()

    auth_code = request.args.get("authorization_code")
    dataset_id = request.args.get("dataset")
    redirect_uri = app.BASE_CLIENT_URL + 'geneplaza/auth'

    data = {
      "data": {
             "type": "token",
             "attributes": {
                "grant_type": "authorization_code",
                "scope": dataset_id,
                "code": auth_code,
                "redirect_uri": redirect_uri
            }
        }
    }

    from requests.auth import HTTPBasicAuth
    r = requests.post(
        'https://developer.geneplaza.com/token',
        auth=HTTPBasicAuth(
            app.config['GENEPLAZA_CLIENT_ID'],
            app.config['GENEPLAZA_CLIENT_SECRET']
        ),
        json=data
    )

@willgdjones the data should be

data = {
  "data": {
         "type": "token",
         "attributes": {
         	"grant_type": "authorization_code",
         	"scope": dataset_id,
                 "code": auth_code,
		"redirect_uri": redirect_uri
         }
    }
}

And Iam not using python often enough to know it, but should you also not have to json.dump the data or you can use the json
argument instead of the data
r = requests.post('https://developer.geneplaza.com/token', headers=headers, json=data)
If you do that you can remove the header Content-Type, as it will be added automatically

I think but that's not sure neither, you can just pass an auth argument with a tuple of password and user, and it will perform automatically the basic auth:
r = requests.post('https://developer.geneplaza.com/token', headers=headers, json=data, auth=(app.config['GENEPLAZA_CLIENT_ID'], app.config['GENEPLAZA_CLIENT_SECRET']))

Getting closer, now the error is:

{'errors': [{'title': 'The scope requested is invalid for this request', 'status': 400, 'meta': []}]}

This is how the integration currently looks.

@willgdjones
This is my bad in the data scope should be a string "dataset"

data = {
  "data": {
         "type": "token",
         "attributes": {
         	"grant_type": "authorization_code",
         	"scope": "dataset"
                 "code": auth_code,
		"redirect_uri": redirect_uri
         }
    }
}

You need the dataset id after to access it because the id should in the path https://developer.geneplaza.com/datasets/<DATASET_ID>/files

Ok makes sense, thanks! Will try that now.