Deprecation of HTTP Basic Auth and OAuth 1.0a

[opk12]

Thank you for this program. Does it use OAuth 1? OSM is slowly deprecating HTTP Basic Auth and OAuth 1.0a in favor of OAuth 2 (see announcement and tracking issue) so I thought you'd want to know.

[rnorris]

Yes I'm aware and have been thinking about this for a while - last time I looked (many years ago) - there wasn't many/any C library options seemingly available. But now there are:

https://github.com/babelouest/iddawc

or

https://github.com/OpenIDC/liboauth2

Still obviously need to get around to doing it...

[danieldegroot2]

Note, api.openstreetmap.org API url currently can not do OAuth 2 handshake. See openstreetmap/operations#951 (comment)
You can split the www. base URL and api. API url. See osmlab/osm-auth#123 (comment)

cc: @rnorris

[CrabstickOMalley]

It seems at this point there's no way for an OSM user to create Oauth 1.0 tokens anymore. So there is no way for a 'new' user to use Viking with OSM since they migrated to Oauth 2, although from what I gather they have not 'cut off' legacy apps that have valid tokens already so I guess those with working installs are OK temporarily. I was a user of Viking years ago and wanted to re-start but at this point having no tokens means apparently OSM integration is impossible. Unfortunate but seems like Viking as an application is in 'sunset' mode anyway. If anyone can recommend a good replacement with live ongoing maintenance/development that would be great. Thanks.