I managed to fix it. In my setup the OAuth plugin for Discourse was supplying an Authorization header, no matter what. WP OAuth Server didn’t like this in combination with the access_token query param. By removing the query param (on the user_json_url), I got it to work!
3 Likes