Migrate from OAuth 1.0a to OAuth2

[stefanb]

OpenStreetmap is deprecating OAuth 1.0a.

See:

• Deprecation of HTTP Basic Auth and OAuth 1.0a openstreetmap/operations#867
• https://www.openstreetmap.org/user/pnorman/diary/401157
• Spec: https://wiki.openstreetmap.org/wiki/OAuth#OAuth_2.0
• OAuth 2.0 Authorization Server Metadata: https://www.openstreetmap.org/.well-known/oauth-authorization-server
• Possible Go library: golang.org/x/oauth2 with repository at https://github.com/golang/oauth2
  • Adding OSM endpoints: endpoints: add OpenStreetMap endpoints golang/oauth2#631

[hauke96]

Thanks for the issue and links! I know about the deprecation but unfortunately my time is very limited. If anyone else want to work on this, feel free to let me know ;)

[hauke96]

I found some time working on this. OAuth2 will be used with v1.4.4 of STM. Thanks again for bringing this up and also thanks for the links, that saved me some time ;)

[stefanb]

Great! 🎉 🚀
I guess this is still pending a release. Presumably in v1.4.4?

[hauke96]

Exactly, this will be deployed with version 1.4.4 (probably within the next few weeks).

If you run your own instance of STM, then take a look at the release notes here on GitHub, there might be things in your setup/configurations you have to adjust.

[hauke96]

Is now deployed and images are available via docker-hub. Note that I chose to set the version to 1.5.0 instead of 1.4.4.