Error Cannot retrieve OAuth Client credentials (Yet again, I know)

[fongaboo]

Describe the current behavior

When browsing to our dev instance of PeerTube at https://dev.wtfayla.com:16643, we get the oft-occurring error message in the bottom right of the browser window stating the following:

Error Cannot retrieve OAuth Client credentials: Getting client tokens for host dev.wtfayla.com is forbidden. Ensure you have correctly configured PeerTube (config/ directory), in particular the "webserver" section.

This also appears in journalctl (see attached).

Running Peertube and NGINX on a Ubuntu 22.04 server. Server has two NICs:

1. WAN-facing: 50.75.172.138 (dev.wtfayla.com)
2. LAN-facing: 192.168.1.166

NGINX is bound to 50.75.172.138 on TCP port 16643

We've seen many posts regarding this, but we think we've atomized it a bit more. We have two scenarios:

FIRST SCENARIO:

`listen:
hostname: '127.0.0.1'
port: 9000

https: true
hostname: 'dev.wtfayla.com'
port: 16643`

Browse to https://dev.wtfayla.com:16643: ERROR

---

SECOND SCENARIO:

`listen:
hostname: '192.168.1.166'
port: 9000

https: false
hostname: '192.168.1.166'
port: 9000`

Browse to http://192.168.1.166:9000 (from LAN): NO ERROR

Steps to reproduce

1. NODE_CONFIG_DIR=/var/www/peertube/config NODE_ENV=production npm run update-host
2. systemctl restart peertube.service nginx.service
3. visit https://dev.wtfayla.com:16643

Describe the expected behavior

• OAuth error should not pop up
• Should be able to log in with (peertube) root password

Additional information

• PeerTube instance:

  • URL: https://dev.wtfayla.com:16643
  • Version: 7.0.1
  • NodeJS version: 20.18.1
  • Ffmpeg version: 4.4.2-0ubuntu0.22.04.1

• Browser name, version and platforms on which you could reproduce the bug: Windows/Brave/1.73.105 Chromium: 131.0.6778.265 (Official Build) (64-bit)], [MacOS/Firefox/134], [MacOS/Chrome/131]

• Link to browser console log if relevant:

• Link to server log if relevant (journalctl or /var/www/peertube/storage/logs/):

journalctl.txt
peertube.conf.txt
production.yaml.txt

[Chocobozzz]

Hi,

Did you try this patch on your nginx config? 6a03b50