This may be a Chrome issue (Version 92.0.4515.107 (x86_64)) because it seems to work in Firefox. I cannot remember exactly what I did that caused the app to request permissions again but I think it came up after I added permission for images:
@tbinna from the description of 431 error, it doesn’t look like it should be browser-specific. Could you please share your app (Distribution in Dev Console) and share the installation link? I’d like to reproduce this error on my test site.
The redirect to auth.atlassian.com again leads to the same 431 error page that I see in Forge. And just as with the Forge app, opening this link in Firefox works (the redirect works as expected).