Open bhousel opened 6 years ago
bhousel
commented
6 years ago We discussed auth0.com as a possible solution for some of these. It's unlikely to be accepted as an auth solution for an "official" OSM resource, but might be a useful option to provide authentication for unofficial OSM projects that need to authenticate against OSM.
mmd-osm
commented
6 years ago Forum oauth login support should be much easier, compared to the estimated effort to have something similar for the OSM Wiki. Today, the forum already uses Basic Auth and osm.org as authentication provider, meaning that Forum user names are already in sync with osm.org user names.
Other projects already did implement and use oauth on osm.org in php, like https://github.com/it4workflow/osmpoll
@it4workflow: do you think it would be feasible to integrate your oauth for osmpoll into the forum login somehow?
osmtools
commented
6 years ago It wasn't mine oauth. Have a look at https://github.com/it4workflow/osmpoll/tree/master/app/helpers/oauth and you'll see that's a 3rd library (from 2010) and only supports OAuth 1.0a. What if osm switch to OAuth 2.0?
And if you have a look at the history of this folder you see only one big change:
oauth: changed user id from int(11) to varchar(32) binary.
I've done this because i've stored the php session id and not the (osm)userid, because at the very first login moment i don't knew the osm(userid).
So i would recommend a newer and well actually supported 3rd library.
mmd-osm
commented
3 years ago This can be done once we move the forum to discourse and add oauth2 support to the osm website.
Wiki seems more tricky, the available oauth plugin is in beta state and needs some more work.
danieldegroot2
commented
11 months ago Switch to OAuth 2, from OAuth 1 and HTTP Basic Auth, is being tracked at https://github.com/openstreetmap/operations/issues/867
mmd-osm
commented
6 months ago Related operations issue: https://github.com/openstreetmap/operations/issues/507
from https://wiki.openstreetmap.org/wiki/Top_Ten_Tasks#OAuth_login_to_wiki
OAuth login to wiki
Active users in OpenStreetMap have two logins: one for the website and one for the wiki. These are not linked in any way, except for a userbox. And this is obviously a frustration for novice users: registering is hard.
Many services in the OSM ecosystem already support logging in as an existing OSM user account via OAuth. The two notable exceptions are the Wiki and the Forum. While the latter at least allows use of an existing OSM account through an alternative mechanism, the wiki requires separate accounts. Implementing OAuth support for the wiki would lower the barrier for mappers to get involved with the wiki, and make life for many members of the OSM community just a little bit more convenient.
The goal is to find a technical solution, such as a plugin for MediaWiki, allowing users to sign in and to register using OAuth. Such a plugin may already exist, but it will need configuring and testing. Additionally, already registered users need a simple way of linking their wiki and OSM logins, and the interface should automatically display two-way links between the profiles.
An unresolved issue that would need to be tackled is whether there should be a harmonization of user names, as wiki and osm.org usernames are currently not a 1:1 match.
Bonus task: Add OAuth sign in to the OSM Forum. Source code for the forum is on the OSM github.
See also:
_This issue comes from the OSM Top Ten Tasks page_