xint-oauth-pkce-single-flow-no-regeneration
xint OAuth PKCE flow generates a unique state/code_verifier pair per invocation of xint auth setup. If a new auth URL is generated before the callback code from the previous URL is submitted, state mismatch occurs and the token exchange fails. The correct procedure: run xint auth setup once, capture the printed auth URL, open it in browser, authorize, copy the full redirect URL from the address bar, then paste it to complete the exchange — all in one uninterrupted flow.
Related
- xint-oauth-pkce-state-mismatch-on-reuse
- xint-oauth-callback-port-mismatch-8477-vs-3333
- xint-pkce-state-must-match-same-invocation
- xint-oauth-callback-port-is-3333-not-8477
- xint-oauth-pkce-state-per-invocation-manual-exchange-procedu
- xint-oauth-callback-port-3333-not-8477
- xint-oauth-pkce-state-mismatch-each-invocation-generates-new