I'm noticing that the DeviceFlow auth doesn't seem to prompt a new login when the token is expired. Should I file an issue for this? This is using oauth2proxy btw

❯ flyte --config ~/.flyte2/config.yaml run hello.py main
  > Launching remote execution...
  > Building 1 image...
    > Building image flyte for environment hello_env
    i Image ghcr.io/flyteorg/flyte:py3.10-v2.5.14 already exists, skipping build
  ✓ Built image for environment hello_env: ghcr.io/flyteorg/flyte:py3.10-v2.5.14
  > Bundling code...
  ✓ Code bundle: 1 files, 0.009765625 MB (compressed 0.0006742477416992188 MB)
  > Uploading code bundle...
╭─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Exception ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ ✕ Execution failed: Upload failed for /tmp/tmppmylbhgo/fast06e6f07b9d6d9cc0459c6f122db89a69.tar.gz: permission denied for org='local', project='flytesnacks', domain='development'. Check that the project/domain/org in config.yaml exists and that you have access. Details: Forbidden │

oauth2proxy logs

2026-08-13 10:17:11.358 error [2026/08/13 17:17:11] [jwt_session.go:54] Error retrieving session from token in Authorization header: [unable to verify bearer token, failed to verify token: oidc: token is expired (Token Expiry: 2026-08-11 11:04:44 +0000 UTC)]

yup, file an issue, thanks. I tested pkce only

It works fine, I think oauth2proxy just had a setting I had flipped which was sending 403 instead of 401 on expired tokens