Of course! Welcome to Elixir 
We’ll get you sorted 
zachdaniel
Creator of Ash
stryderjzw
Well, after struggling a bit, looks like Claude figured it out for me. 
I added IO.inspect statements to AuthController failure callback and it said the secrets weren’t set.
Turns out I was using Application.fetch_env! with a ! and it wasn’t returning the secret in a {:ok, <secret>} format.
1