Troubleshooting

redirect_uri mismatch

The redirect_uri you send in the authorization request must exactly match one registered on your project — including trailing slashes and http vs https. Update it from your project's page on the Dashboard.

invalid_client

Usually means your client_id or client_secret is wrong, or your project's secret was rotated since your application last read it.

Login loops back to the login screen

This is almost always a code_verifier that no longer matches the code_challenge sent in the original request — check that both come from the same session and aren't being regenerated between steps.

Still stuck?

See Support.