#9049·bruno

Bruno 4.1.0 - OAuth2 state mismatch: the returned state does not match the issued state.

Author: billfroelichCreated Aug 20, 2026Updated Sep 29, 2026
Labelsbug

Internal - [BRU-4477]

I have checked the following:

  • I have searched existing issues and found nothing related to my issue.

This bug is:

  • Making Bruno unusable for me.
  • Slowing me down but I'm able to continue working.
  • Annoying.
  • This feature was working in a previous version but is broken in the current release.

Bruno version

4.1.0

Operating System

macOS

Specific OS Version / Distro

No response

Describe the bug

Using Bruno 3.5.3 with collection level Oauth 2.0 authentication for Authorization code and the built in browser I can successfully get the token as expected and use it to send API requests.

After upgrading to Bruno 4.1.0 every time I try to get the token using the same settings in the same collection I get the error.

"OAuth2 state mismatch: the returned state does not match the issued state."

I am unable to get the token and therefore unable to use Bruno anymore with the 4.x version. I have downgraded to 3.5.3 as a workaround.

Steps to reproduce

  1. Go to Collection tab
  2. Select Auth
  3. Click Get Token
  4. Works in 3.5.3 but gives error under 4.1.0

Collection to reproduce

No response

Screenshots/Live demo link

Standard Auth screen at the collection level