osmcha-frontend
osmcha-frontend copied to clipboard
Use the new OAuth2 endpoint for authentication
OSM now supports OAuth2 to authentication: https://wiki.openstreetmap.org/wiki/OAuth
OSM's OAuth 1.0a is in the process of being deprecated, as discussed at https://github.com/openstreetmap/operations/issues/867. No timeline has been set, but we do not expect to shut off OAuth 1.0a this year. It would be good to move to OAuth 2.0 well before this time.
I might be worth checking https://www.npmjs.com/package/osm-auth out to move the auth flow to a library. We use it in an react app at https://github.com/FixMyBerlin/atlas-app/blob/develop/src/components/Layout/Header/User/User.tsx.
Update on timelines for sunsetting OAuth 1.0a: https://community.openstreetmap.org/t/oauth-1-0a-and-http-basic-auth-shutdown/108490
Another update: https://blog.openstreetmap.org/2024/04/17/oauth-1-0a-and-http-basic-auth-shutdown-on-openstreetmap-org/
- May 1st, 2024: System administrators will start brownouts to find applications that are still using OAuth 1.0a or HTTP Basic Auth.
- June 1st, 2024: OAuth 1.0a and HTTP Basic Auth will be shut down.