According to @Jdforrester-WMF simply pointing composer to a GitHub repo with the fork will not be enough, we actually need to upload the fork onto packagist.
The fork we're using is at https://github.com/wikimedia/oauth2-server v9.0.0-alpha branch. @Jdforrester-WMF has agreed to help out with the upload, my future is in your hands James.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • eprodromou | T235270 Wikimedia API Gateway | |||
| Resolved | • eprodromou | T255030 Wikimedia API Gateway MVP | |||
| Resolved | hnowlan | T235277 Client Developer uses OAuth 2.0 for authorization | |||
| Resolved | • Pchelolo | T261428 Add support for iss claim in OAuth2 access tokens | |||
| Resolved | • Pchelolo | T261986 Upload WMF fork of oauth2-server to packagist and vendor it |
The issue seems to have been fixed by rMWVDdb139170fa1d: Update oauth2-server dependency.