Google Calendar integration broken after switching to Authentik

I just switched my forward authorization from Google OAuth to Authentik OAuth.

In the process my google calendar integration broke for some reason. I went ahead and created a new oauth token in the developer console and added the application credentials.

When I try to reconfigure the calendar integration I get an error “Config flow could not be loaded: 401: Unauthorized”.

My logs show “Login attempt or request with invalid authentication from [a cloudflare IP]. Requested URL: '/api/config/config_entries/options/flow'. [client info]

When I switch back to google oauth in my traefik middlewares everything is hunky dory.