The provided redirect_uri is not in the list of allowed callback URLs because of the callback URL mismatch

The readme is old, I was suffering with the same thing. Changing the callback url to http://localhost:3000/login/oauth2/code/okta fixed the problem. I also added the http://localhost:3000 to allowed urls