Migrate from OAuth 1.0a to OAuth2

Question

Migrate from OAuth 1.0a to OAuth2

stefanb opened this issue 10 months ago · comments

Štefan Baebler commented 10 months ago

OpenStreetmap is deprecating OAuth 1.0a.

See:

openstreetmap/operations#867
https://www.openstreetmap.org/user/pnorman/diary/401157
Spec: https://wiki.openstreetmap.org/wiki/OAuth#OAuth_2.0
OAuth 2.0 Authorization Server Metadata: https://www.openstreetmap.org/.well-known/oauth-authorization-server
Possible Go library: golang.org/x/oauth2 with repository at https://github.com/golang/oauth2
- Adding OSM endpoints: golang/oauth2#631

Hauke Stieler · Answer 1 · Mon Oct 30 2023 19:51:07 GMT+0800 (China Standard Time)

Thanks for the issue and links! I know about the deprecation but unfortunately my time is very limited. If anyone else want to work on this, feel free to let me know ;)

Hauke Stieler · Answer 2 · Fri Nov 10 2023 16:50:42 GMT+0800 (China Standard Time)

I found some time working on this. OAuth2 will be used with v1.4.4 of STM. Thanks again for bringing this up and also thanks for the links, that saved me some time ;)

Štefan Baebler · Answer 3 · Fri Nov 10 2023 17:21:19 GMT+0800 (China Standard Time)

Great! 🎉 🚀
I guess this is still pending a release. Presumably in v1.4.4?

Hauke Stieler · Answer 4 · Fri Nov 10 2023 18:29:44 GMT+0800 (China Standard Time)

Exactly, this will be deployed with version 1.4.4 (probably within the next few weeks).

If you run your own instance of STM, then take a look at the release notes here on GitHub, there might be things in your setup/configurations you have to adjust.

Hauke Stieler · Answer 5 · Mon Nov 13 2023 05:11:46 GMT+0800 (China Standard Time)

Is now deployed and images are available via docker-hub. Note that I chose to set the version to 1.5.0 instead of 1.4.4.