Hi all,
I'm trying to create an OAuth 2.0 consumer, for use only by my account, but
Wikibase reports the following error:
*Notice*: Key file "file://" permissions are not correct, recommend
changing to 600 or 660 instead of 755 in
*/var/www/html/vendor/league/oauth2-server/src/CryptKey.php* on line *59*
[487866b8566d2c885048b46b] 2025-08-26 00:02:52: Fatal exception of type
"Lcobucci\JWT\Signer\Key\FileCouldNotBeRead"
Seeing this error for an existing file would be one thing, but seeing it
for "file://" makes me wonder if there is additional configuration I need
to do. I've attached the screenshot of the configuration options I hose for
the API consumer. My goal is to create an authentication method that is
simpler to implement for my scripts than the full OAuth 2.0 token
negotiation, which is causing its own set of errors, namely:
{
"error": "rest-write-denied",
"httpCode": 403,
"httpReason": "Forbidden"
}
despite having this in LocalSettings.php
$wgGroupPermissions['*']['writeapi'] = true;
Is anyone successfully using OAuth 2.0 on WBS Deploy?
I'd appreciate any insight you may have, or the steps you took to set your
instance up.
Michael Lindsey
Law Library
UC Berkeley