I see that Headers is selected in Canva for the Credential transfer mode, so I wonder if Bubble might use the POST request body instead. I haven’t actually used Bubble as an OAuth provider, so I’m just shooting from the hip here.