OAuth Auth-Code flow via System Browser failing with missing access-token

[dfrommi]

Hello,

I'm trying to use System Browser for OAuth with an Auth-Code flow, but I'm not able to get this running.

The redirect from the browser reaches Bruno, but then it complains No access token received from authorization server. This is understandable, because the callback is bruno://app/oauth2/callback?code=myauthcode. No token, just the code.

If I change the type to implicit, the access-token makes it successfully back to Bruno. Unfortunately I need the id-token, so implicit is not sufficient.

My initial conclusion was that System Browser is only supported for implicit flow, but the docs talk right at the beginning about Authentication Code Authorization.

So I wonder, am I missing something? Can someone clarify when System Browser is supposed to be working, when not.
Thank you very much!