Note, the CSRF token seems to be able to be anything, so you can leave it as xxx.
curl -u <your_username_here> -kv -H "X-CSRF-Token: xxx" ‘<your_openshift_3.2_URL_here>/oauth/authorize?client_id=openshift-challenging-client&response_type=token'