InternalOpenIDError: Failed to verify assertion

I get this error using this repo out of the box.

I login into Quickbooks, then it redirects to the callback URL and fails to validate the signature in the sub open-id dependancy because the local computed hash does much match the openID token's hash.

Is there some config I'm missing in my app card configuration on the QuickBooks Developer portal? My OpenID URL is set to http://localhost:3000/auth/intuit/return

have tired clearing browser cookies etc.