OK, next issue… looks like ktor oauth2 does not properly handle

response_mode=form_post

, it seems. In

Outh2.kt:ApplicationCall.oauth2HandleCallback()

, it only looks for

code

and

state

in parameters, which don’t appear to be properly initialized when they are sent as

application/x-www-form-urlencoded