Bruno 4.1.0 - OAuth2 state mismatch: the returned state does not match the issued state.
Author: billfroelichCreated Aug 20, 2026Updated Sep 29, 2026
Labelsbug
Internal - [BRU-4477]
I have checked the following:
- I have searched existing issues and found nothing related to my issue.
This bug is:
- Making Bruno unusable for me.
- Slowing me down but I'm able to continue working.
- Annoying.
- This feature was working in a previous version but is broken in the current release.
Bruno version
4.1.0
Operating System
macOS
Specific OS Version / Distro
No response
Describe the bug
Using Bruno 3.5.3 with collection level Oauth 2.0 authentication for Authorization code and the built in browser I can successfully get the token as expected and use it to send API requests.
After upgrading to Bruno 4.1.0 every time I try to get the token using the same settings in the same collection I get the error.
"OAuth2 state mismatch: the returned state does not match the issued state."
I am unable to get the token and therefore unable to use Bruno anymore with the 4.x version. I have downgraded to 3.5.3 as a workaround.
Steps to reproduce
- Go to Collection tab
- Select Auth
- Click Get Token
- Works in 3.5.3 but gives error under 4.1.0
Collection to reproduce
No response
Screenshots/Live demo link
Standard Auth screen at the collection level
Source: usebruno/bruno