If isolating the request/response cycle isn’t revealing the issue, it might be worth running the same token request through a completely different environment (like a lightweight cloud function) to see if the problem persists outside your current se...
