The OAuth loop should be done from the config page, not the panel. You should be able to whitelist the bungie domain on config page, do this on your dev.twitch.tv Dashboard under Versions -> Manage -> Extension Capabilities -> Whitelist Config Urls.
If you’re not sure whether or not the dev rig is the problem, you can simply test it for real by adding the extension to your channel and visiting the configuration page for it.