Hello,
if you have the forum set to private (guest = view forum on Never) then it is not possible to generate an OAuth token via the API because you will always get “do_not_have_permission”. It only works if you add an api key, but you don't want that.