Developer notes Allow insecure OAuth callbacks For local development, set the OAUTHLIB_INSECURE_TRANSPORT environment variable to allow insecure OAuth callbacks before starting the server: export OAUTHLIB_INSECURE_TRANSPORT=1