Since today Twitter has enabled Callback URL whitelisting, even though callback URL has been set in opauth and at twitter it has been whitelisted, it appears that this strategy is passing something else in the request, since it returns this error:
Callback URL not approved for this client application. Approved callback URLs can be adjusted in your application settings