the thing is, i'm able to get the access token from launchwebauthflow(), parsed it on jwt.io and it looked fine