Hi, Max.
Do you still keep experiencing this issue? Please note that Gluu CE 3.1.1 has been released and you may opt to try your flow in the newer version as whatever causes it could be fixed there.
Regarding data provided by you before (sorry for the late response), a couple of thoughts:
1. `scope=profile%20email` - you're missing `openid` scope in your authz request which is mandatory by OIDC spec, and oxAuth isn't guaranteed to behave predictably if it's omitted.
2. Judging by screenshot of your client's metadata, you don't specify neither `response_type`, nor `grant_type` explicitly in it, and I would strongly recommend to specify it. Judging by your authz request url from above, I would recommend to use `code` and `authorization_code`, correspondingly