Deprecation of HTTP Basic Auth and OAuth 1.0a

viking-gps / viking

Viking is a free/open source program to manage GPS data (inc GPX, FIT, TCX and KML files). You can import and plot tracks, routes and waypoints, show OpenStreetMaps (OSM), Bing Aerial and other maps, generate Mapnik maps, geotag images, make new tracks, routes and waypoints, see real-time GPS position, etc. It is written mostly in C with GTK

http://sourceforge.net/projects/viking/

GNU General Public License v2.0

223 stars 55 forks source link

Deprecation of HTTP Basic Auth and OAuth 1.0a #196

Open opk12 opened 1 year ago

opk12 commented 1 year ago

Thank you for this program. Does it use OAuth 1? OSM is slowly deprecating HTTP Basic Auth and OAuth 1.0a in favor of OAuth 2 (see announcement and tracking issue) so I thought you'd want to know.

rnorris commented 11 months ago

Yes I'm aware and have been thinking about this for a while - last time I looked (many years ago) - there wasn't many/any C library options seemingly available. But now there are:

https://github.com/babelouest/iddawc

https://github.com/OpenIDC/liboauth2

Still obviously need to get around to doing it...

danieldegroot2 commented 11 months ago

Note, api.openstreetmap.org API url currently can not do OAuth 2 handshake. See https://github.com/openstreetmap/operations/issues/951#issuecomment-1748717154 You can split the www. base URL and api. API url. See https://github.com/osmlab/osm-auth/pull/123#issuecomment-1777330094

cc: @rnorris