XF 2.3 Trying to get Xenforo's oAuth / Rest api to work

[Nicky Vermeersch]

Hello

I'm trying to get a single sign on to work for Bookstack (wiki). I set up my endpoints in the .env of Bookstack

# XenForo 2.3
# This tells BookStack exactly where to find the username in the XenForo response
OIDC_DISPLAY_NAME_CLAIMS=username

# XenForo Connection
OIDC_ISSUER=https://www.mcmiddleearth.com/community/
OIDC_ISSUER_DISCOVER=false
OIDC_JWKS_URI=https://www.mcmiddleearth.com/community/api/oauth2/keys
OIDC_CLIENT_ID=******************
OIDC_CLIENT_SECRET=********************

# Explicit Endpoint Mapping for XenForo 2.3
OIDC_AUTH_ENDPOINT=https://www.mcmiddleearth.com/community/oauth2/authorize
OIDC_TOKEN_ENDPOINT=https://www.mcmiddleearth.com/community/api/oauth2/token
OIDC_USERINFO_ENDPOINT=https://www.mcmiddleearth.com/community/api/me

# Force use of the specific scope you just checked
OIDC_ADDITIONAL_SCOPES="user:read"

But when I try to use the single sign on button, Bookstack returns an error. When checking the Laravel log, I see there's an issue with keys not being found.

[2026-02-09 12:00:33] production.ERROR: Missing required configuration "keys" value {"exception":"[object] (InvalidArgumentException(code: 0): Missing required configuration \"keys\" value at /var/www/bookstack/app/Access/Oidc/OidcProviderSettings.php:80)

I guess these are JWKS keys or something, but I can not seem to find them (not on .well-known for example). Does anyone have experience setting this up?

 

[Chris D]

OIDC_JWKS_URI=https://www.mcmiddleearth.com/community/api/oauth2/keys

I don't know what this is supposed to be exactly, but this isn't an endpoint that exists.