From d3964c3aaba827a5c71b4f757ce642b79d100781 Mon Sep 17 00:00:00 2001
From: gaoguobin <31329849+gaoguobin@users.noreply.github.com>
Date: Wed, 20 May 2026 14:25:08 +0800
Subject: [PATCH] docs: add ChatGPT token exchange 403 routing troubleshooting

---
 README.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/README.md b/README.md
index 29a4f40..2ff8ed0 100644
--- a/README.md
+++ b/README.md
@@ -139,6 +139,18 @@ net start winnat
 netsh interface ipv4 show excludedportrange protocol=tcp
 ```
 
+If ChatGPT login fails with `Token exchange failed ... 403 Forbidden: Country, region, or territory not supported`,
+verify routing before retrying:
+
+- Confirm proxy status is ready, including `needs_restart=false`.
+- Confirm provider auth prep/split already completed.
+- Ensure your system proxy / VPN setup (including TUN mode if needed) captures Codex App/WebView
+  login traffic, not only model provider traffic.
+- Temporarily disable route/proxy switchers (for example `ccswitch`) that can override or split
+  login routing.
+- Treat this as an OpenAI region/routing rejection during OAuth token exchange, which is separate
+  from third-party provider auth failures.
+
 ## Dashboard
 
 Open: