OAuth Server flow redirects user to "Page Expired" when redirected through middleware server

[RyanF968]

Hello,

I am using an architecture similar to the one described here.  I have a middleware server that handles the OAuth flow with the third-party API (e.g., Constant Contact) and the client makes direct requests only to the middleware server.  This is so I can have a single redirect URI to the middleware server with multiple clients on different domains.

This has worked with other third-party APIs.  But, with Constant Contact, I am having an issue at the point where the client is directed to the authorization request page.  With the middleware architecture, the client makes a request to the middleware server, which then redirects this request to the appropriate authorization request URL and the client should see the authorization request page in the browser.  Instead, I am redirected to Constant Contact's login page, and after logging in, I'm seeing this page and there is no request to my redirect URI:

I see that the request to my middleware server was redirected to the correct authorization request URL.  I confirmed this because when I went directly to this URL in my browser, it went to the authorization request page and the OAuth flow worked successfully from there.  It's only when the request to this URL goes through a redirect, it eventually ends up at the Page Expired page, rather than the authorization request page.

Looking at the requests, there seems to be a few redirects going on.  I'll list them here.  Maybe there's something simple that I'm missing.

• Request to middleware service (local testing) with temporary access code
  • http://127.0.0.1:52888/api/SetupOAuth/Start/[temporary_access_code]
• Responds with redirect 307 to authorization request endpoint
  • https://api.cc.email/v3/idfed?response_type=code&client_id=[client_id]&scope=contact_data%20account_...
• Responds with redirect 302 to:
  • https://idfed.constantcontact.com/as//authorization.oauth2?pfidpadapterid=ctctOAuth2IdpAdapter&scope...]
• Responds with redirect 302 to (Iooks like the login request):
  • https://login.constantcontact.com/login?goto=https%3A%2F%2Fidfed.constantcontact.com%2Fas%2FMvR9SFig...
• Responds with redirect 302 to
  • https://login.constantcontact.com/login/?goto=https%3A%2F%2Fidfed.constantcontact.com%2Fas%2FMvR9SFi...
• Responds with 200
  • This is the "Page Expired" page

Any help you could provide would be greatly appreciated.

Thanks