`(a fake URL we use for redirecting the login flow) won't work.` was the crucial information. As it's a fake url I am assuming the extension listens to that domain. I had in the extension settings the option `site access` set to `on click` as I don't want extensions to read all possible page data.Th...