Prefer device/remote auth flows over localhost OAuth
Logging in to tools should work when you're only holding your phone.
how it works
Use device-code/non-interactive flows; where a localhost callback is unavoidable, front it with tailscale serve and a one-tap page (gog-reauth).
Technique: A pattern or hard-won lesson, written down so it isn't learned twice.
The code for this one lives in a private repo. This page explains the idea so you can build your own.