Use the new OAuth2 endpoint for authentication

[willemarcel]

OSM now supports OAuth2 to authentication: https://wiki.openstreetmap.org/wiki/OAuth

[mmd-osm]

OSM's OAuth 1.0a is in the process of being deprecated, as discussed at openstreetmap/operations#867. No timeline has been set, but we do not expect to shut off OAuth 1.0a this year. It would be good to move to OAuth 2.0 well before this time.

[tordans]

I might be worth checking https://www.npmjs.com/package/osm-auth out to move the auth flow to a library. We use it in an react app at https://github.com/FixMyBerlin/atlas-app/blob/develop/src/components/Layout/Header/User/User.tsx.

[mmd-osm]

Update on timelines for sunsetting OAuth 1.0a: https://community.openstreetmap.org/t/oauth-1-0a-and-http-basic-auth-shutdown/108490

[mmd-osm]

Another update: https://blog.openstreetmap.org/2024/04/17/oauth-1-0a-and-http-basic-auth-shutdown-on-openstreetmap-org/

• May 1st, 2024: System administrators will start brownouts to find applications that are still using OAuth 1.0a or HTTP Basic Auth.
• June 1st, 2024: OAuth 1.0a and HTTP Basic Auth will be shut down.

[mnalis]

Reminder: June 1st, 2024 is this upcoming weekend, and Login will stop working then unless this is fixed and OAuth2 is implemented.

(And thanks to everyone working hard on this! ❤️)

[willemarcel]

OSMCha is now using OAuth2!