Hi Liam,
You are 100% correct - you have to first request the auth code with a get command, i have managed to do this in browser with the following URL:
Problem is when I run this is postman it returns me the HTML of the google sign in page, if I run in browser and authorise access, I can copy that code and use in the POST and it works like a charm, however, only for one access token.
Thanks to you I am definitely much closer, will keep attempting and let you know if I come right.