Okay it was throwing a 400 error for me, and I tracked it down to this error message:
The specified redirect_uri 'http://localhost:3000' does not have a registered origin.
If you remove the trailing / from your Allowed Web Origins in the application settings that should solve the problem. Additionally, I am going to let the team know. Thanks for reporting this.
Best,
Dan