Related to #35599.

This typo appeared at some point during the OIDC Dev UI migration, as the old code was passing the token directly, but with the amount of code changes and refactoring it went unnoticed, it is not a blocker as it will only not work if Dev UI is used to test service using one of these 2 grants, which is quite rare as well, typical Dev UI SPA flow is a user login to Keycloak.