failed to setup oauth using google sso

[medival]

Here is my setup

services:
  app:
    container_name: wapydev-app
    image: ghcr.io/meceware/wapy.dev:latest
    restart: unless-stopped
    environment:
      SITE_URL: https://wapy.mvl.biz.id
      DATABASE_URL: postgresql://username:db@hostname:5432/wapy?schema=public
      NEXTAUTH_URL: https://wapy.mvl.biz.id
      AUTH_URL: https://wapy.mvl.biz.id/api/auth
      AUTH_SECRET: generated-secret
      AUTH_TRUST_HOST: true
      AUTH_DEBUG: true
      GOOGLE_ID: printout-from-google
      GOOGLE_SECRET: printout-from-google
      GITHUB_ID: printout-from-github
      GITHUB_SECRET: printout-from-github
      DISABLE_USER_REGISTRATION: false
      EMAIL_SERVER_USER: dev
      EMAIL_SERVER_PASSWORD: dev
      EMAIL_SERVER_HOST: wapydev-mailpit
      EMAIL_SERVER_PORT: "1025"
      EMAIL_FROM: no-reply@local.test
    ports:
      - 5006:3000

I tunnel it through cloudlfare zero trust, I do believe already bypass the cookies and disable all the security rules

here is the logs
wapydev-app | [auth][error] InvalidCheck: pkceCodeVerifier value could not be parsed. Read more at https://errors.authjs.dev#invalidcheck
wapydev-app | at es (/app/.next/server/chunks/6051.js:437:24348)

I noticed, it throws login?error=configuration

medival@DESKTOP-DCH1T37:~$ curl -s -D - -o /dev/null https://wapy.mvl.biz.id/api/auth/signin/google
HTTP/2 302
date: Sat, 27 Sep 2025 04:20:43 GMT
location: https://wapy.mvl.biz.id/login?error=Configuration