@cwdent or @Jgreen, looks like there's an issue with the OAuth token request. Can you check if frdev is allowed to make the http request to production civi?

In T207209#4672178, @Ejegg wrote:

@cwdent or @Jgreen, looks like there's an issue with the OAuth token request. Can you check if frdev is allowed to make the http request to production civi?

Basic connectivity is fine:

root@frdev1001:/var/log/nginx# telnet civi1001 444

Connected to civi1001.frack.eqiad.wmnet.
Escape character is '^]'

Does dash log somehere?

apache2 on the civi server is logging this:

127.0.0.1 - - [16/Oct/2018:20:24:57 +0000] "POST /oauth/request_token HTTP/1.1" 401 409 "-" "Node authentication"

I don't see any clues in logs as to what's happening under the hood though.

Ahh, OK, so it's getting through to the Civi server, it's just that Civi's responding with a 401. Thanks, I'll try to dig more from there.

This is still working locally, so it's not an issue of the code dying. There's got to be something in the environment.

Change 474936 had a related patch set uploaded (by Ejegg; owner: Ejegg):
[wikimedia/fundraising/crm@master] Tweak OAuth lib to respect x-forwarded-proto

https://gerrit.wikimedia.org/r/474936

Change 474936 merged by jenkins-bot:
[wikimedia/fundraising/crm@master] Tweak OAuth lib to respect x-forwarded-proto

https://gerrit.wikimedia.org/r/474936

Trying to upstream the fix this time:
https://www.drupal.org/project/oauth/issues/3015132