OAuth Authorization Code Flow for a chat bot: 401 invalid csrf token

[BarryCarlyon]

Step 1 of oAuth is redirect the user to Twitch, you seem to be trying to use Postman to GET that URL instead.

You have to do this manually for your Chat bot initially/once.
Then refreshing can be automated, until the refresh token dies/is disabled for whatever reason

@Goati

so I go over to https://www.uuidgenerator.net/ , remove the dashes from the generated UUID and enter
a 32-character csrf token under state:

https://id.twitch.tv/oauth2/authorize?client_id=myValidAndTestedClientID&redirect_uri=https://twitchapps.com/tokengen/&response_type=code&scope=channel_subscriptions&state=fc156e575b5b49b191bce3a50347c668

You seem to be using twitchapps generator not your own.

@Goati

it will give me 401 invalid csrf token with the following request:

You seem to be trying to fetch the URI instead of redirecting the user, this will result in weirdness and the CSRF error as step 1 is redirect the user to Twitch.