I found the issue.Login form should redirect to url that ends with "/callback/j_security_check"that triggers AEM code to make an additional call to OAuth service to get Access Token 

Hi Albin,Thanks for response!I am not using JsonTokenExtractor. I followed same link that you provided.From the logs i see that AEM tries to find authorization_code in request before request comes back from OAuth login page.so log looks like this:com.adobe.granite.auth.oauth.impl.helper.OauthTokenMa...

Hi, I've implemented a custom OAuth Provider and API. So currently AEM redirects to OAuth form, and after successful login user is redirected back to AEM withauthorization_code as a parameter http://localhost:4503/content/site/en/welcome.html?code=W8kJTZV9syQJ8JOuPWMTCeP_x2C190y-9CmWehunGpM&state=s5...