How do I trade an OAuth token for a Fedauth token with Azure AD?

I am trying to access a resource that's secured with Azure Active Directory. I can see from the HTTP traffic that my browser uses a Fedauth token when accessing the resource, but I need to access this resource from a server application.

I believe I need to get an OAuth token, and then exchange it for a federated token. How do I do this?