Switch to OAuth 2

[danieldegroot2]

Switch to OAuth 2 from HTTP Basic Auth and OAuth 1.0a. They are being deprecated.
See openstreetmap/operations#867

Note, api.openstreetmap.org API url currently can not do OAuth 2 handshake. See openstreetmap/operations#951 (comment)
You can split the www. base URL and api. API url. See osmlab/osm-auth#123 (comment)

cc: @Zverik

[mnalis]

Given updated announcement openstreetmap/operations#867 (comment) saying turning off OAuth 1.0a will begin in about 2 weeks, brownouts will start at May 1st, 2024 and support will be completely shut down at June 1st, 2024; I wanted to ask @Zverik is the plan for Level0 to be updated by then?

I love using it, and would hate to see it stop working. Is help needed?

[Zverik]

Currently the main blocker is that the server Level0's on has PHP 5.5 which doesn't support OAuth2 out of the box. Upgrading the server is long overdue (OS is nine years obsolete), so the plan is that. But I want to do it closer to April, to have Ubuntu LTS 24 and not think of upgrading for another six years.

[sikmir]

Any news on this? Registration of OAuth 1 applications has been disabled already.

[mnalis]

Ubuntu 24.04 LTS Noble Numbat has just been released yesterday 25. Apr 2024., so that prerequisite at least should be met now.

[Zverik]

Yes, the next prerequisite would be me releasing Every Door 5.0 (hopefully next week), and then I can start moving everything to a new server and updating the libraries to switch to OAuth2.