Anyone with success using OAuthProxy with okta?

[pragmaticivan]

# Configuration - replace with your Okta values
OKTA_DOMAIN = os.getenv("OKTA_DOMAIN", "https://REDACTED.oktapreview.com")
OKTA_ISSUER = os.getenv("OKTA_ISSUER", f"{OKTA_DOMAIN}/oauth2/REDACTED")
OKTA_AUDIENCE = os.getenv("OKTA_AUDIENCE", "REDACTED")
OKTA_JWKS_URI = f"{OKTA_ISSUER}/v1/keys"
BASE_URL = os.getenv("BASE_URL", "http://0.0.0.0:8000")
OKTA_AUTHORIZATION_ENDPOINT = f"{OKTA_ISSUER}/v1/authorize"
OKTA_TOKEN_ENDPOINT = f"{OKTA_ISSUER}/v1/token"

# Use Okta's JWKS endpoint for dynamic key verification
token_verifier = JWTVerifier(jwks_uri=OKTA_JWKS_URI, issuer=OKTA_ISSUER, audience=OKTA_AUDIENCE)

# Create the OAuth proxy
auth = OAuthProxy(
    # Provider's OAuth endpoints (from their documentation)
    upstream_authorization_endpoint=OKTA_AUTHORIZATION_ENDPOINT,
    upstream_token_endpoint=OKTA_TOKEN_ENDPOINT,
    # Your registered app credentials
    upstream_client_id="REDACTED",
    upstream_client_secret="REDACTED",
    # Token validation (see Token Verification guide)
    token_verifier=token_verifier,
    # Your FastMCP server's public URL
    base_url=BASE_URL,
    issuer_url=OKTA_ISSUER,
    # Optional: customize the callback path (default is "/auth/callback")
    # redirect_path="/custom/callback",
)

Trying to test this with both VSCode (Copilot) and Inspector, no success, I get it to redirect but it redirects back with 400 Bad Request with no proper error description.