diff --git a/src/routes/oauth2.js b/src/routes/oauth2.js
index c8d7e758d..a546728ad 100644
--- a/src/routes/oauth2.js
+++ b/src/routes/oauth2.js
@@ -511,7 +511,7 @@ function authorization() {
 function token() {
     return [
         passport.authenticate(['basic', 'oauth2-client-password'], { session: false }),
-        gServer.token(),
+        gServer.token(), // will call the token grant callback registered in initialize()
         gServer.errorHandler()
     ];
 }