Debugging Oauth shenanigans: the curse of the production headers

Last week, I had the privilege of dealing with a particularly fun problem where our Oauth flow for our new application wasn’t working correctly.