diff --git a/NEWS.md b/NEWS.md
index db15ae62..5403f96e 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,5 +1,6 @@
 # httr2 (development version)
 
+* `oauth_flow_auth_code()` now correctly uses the same redirect URI for both authorization and token requests when using the default localhost redirect URL (@pedrobtz, #829).
 * `last_response_json()` now works with content-types that end with `+json`, 
 e.g., `application/problem+json` (@cgiachalis, #782).
 
diff --git a/R/oauth-flow-auth-code.R b/R/oauth-flow-auth-code.R
index ca695c19..f910e416 100644
--- a/R/oauth-flow-auth-code.R
+++ b/R/oauth-flow-auth-code.R
@@ -183,7 +183,7 @@ oauth_flow_auth_code <- function(
     client,
     grant_type = "authorization_code",
     code = code,
-    redirect_uri = redirect_uri,
+    redirect_uri = redirect$uri,
     !!!token_params
   )
 }