ClientID’s are public no need to censore them
Would suggest that your callback is redirecting back to id.twitch.
Check your access log or chrome network tools (preserve log)
And follow the flow.
It’s 99% likely to be something your side/in your implementation