mmd-osm
commented
6 years ago I just tested a custom /map call implementation that hides changeset, user and uid for unauthenticated users. yet returns a timestamp, like in the following snippet.
<node id="5001612487" visible="true" version="1" timestamp="2018-05-06T21:03:37Z" lat="39.9152375" lon="116.3567288"/>
<node id="5001612490" visible="true" version="1" timestamp="2018-05-06T21:03:37Z" lat="39.9151353" lon="116.3567331"/>
<node id="5001612492" visible="true" version="1" timestamp="2018-05-06T21:03:37Z" lat="39.9151353" lon="116.3571026"/>I was testing on http://localhost:8080/index.html without any authentication, and so far there's no indication of any major failure. Obviously, some popups show an "Undefined"/"Unknown" value when there's no details around in the XML:
I could test a few other things, if that's somehow helpful.
Some changes are coming soon to the OSM API, see here
iD is currently designed to do some of these things even if a user is not logged in, so we will need to change some of the code.
The new restrictions probably do not affect iD users editing on openstreetmap.org, because users there are required to log in before using the edit feature and are brought into iD preauthenticated.
(There are some exception situations, for example if the user is already using iD and logs out or revokes tokens in another browser tab. So we should continue to design iD as if a user can lose their OSM auth at any time).