I think the most clear understanding of this issue is that:

You are passing something different than what is registered for your OAuth Client.

It can be the key or something else from the table oauth_clients. So, check every parameter you are passing.

In my case the "redirect" param value differed from what I had saved on the database.