Invalid Authorization Token

That looks correct.

The only error I see is in your OP you specify one redirectURI and in your last message, you use a different redirecURI.

So I don’t see any code issues here.

Your op code doesn’t have a res.send() so it’s just gonna hang there.

Is that all the code for that function/route?