I don’t have any Bosch/Buderus or compatible devices. So my testing is limited. Luckily I can subscribe an empty account and test the bit tricky authorization.
After init copy the http url in your browser to authenticate (Pic 1)
Fetch from Chrome/Edge development tools the request URL (Pic 2) and paste it into config Authorization Redirect URL
Bridge goes online and I can see successful calls
You need to test
Auth is tricky with a fixed client_id. Maybe token stealing occurs between your App and openHAB thing. I had the same problem with Mercedes binding.
It’s just a maybe, you need to check if App and openHAB access works in parallel
As said I’ve no devices so you need to check channel updates and commands
Enable TRACE logging for this binding. It’s verbose but I think necessary now.