Seems like the PKCE policy are different between each servers, some medical departments may use strict policy that dont allow any custom url like myapp://main, I just pop up a webview to do the whole OAuth process at last, then monitor the url and get the code I want, just want to remind other that dont waste time on this