You can create your own token endpoint for your website which can issue access tokens when given an authorization code, but it's easier to use an existing service such as tokens.indieauth.com. To use this service as your token endpoint, use the markup provided below.
<link rel="token_endpoint" href="https://tokens.indieauth.com/token">