<p>OK, that's all fine and good. That said, <a href="https://wiki.openstreetmap.org/wiki/API_v0.6#Uploading_traces">https://wiki.openstreetmap.org/wiki/API_v0.6#Uploading_traces</a> still says "HTTP basic authentication is required." - is that documentation still true? If so, then I believe we need to return to the old behavior at least just for this one API endpoint or else uploading GPS tracks is not possible at all any more.</p>
<p>Also, in general, it feels weird to not desupport the HTTP Auth access and make big announcements about that to the API when changing the CORS behavior like that.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/issues/1609#issuecomment-321666194">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/ABWnLX4QHZeBvXbY0hRxZlzou-B24y1iks5sW2nZgaJpZM4Ov1wt">mute the thread</a>.<img alt="" height="1" src="https://github.com/notifications/beacon/ABWnLeSXkE3Wnq0_OuuOUghGmji4b62pks5sW2nZgaJpZM4Ov1wt.gif" width="1" /></p>
<div itemscope itemtype="http://schema.org/EmailMessage">
<div itemprop="action" itemscope itemtype="http://schema.org/ViewAction">
  <link itemprop="url" href="https://github.com/openstreetmap/openstreetmap-website/issues/1609#issuecomment-321666194"></link>
  <meta itemprop="name" content="View Issue"></meta>
</div>
<meta itemprop="description" content="View this Issue on GitHub"></meta>
</div>

<script type="application/json" data-scope="inboxmarkup">{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/openstreetmap/openstreetmap-website","title":"openstreetmap/openstreetmap-website","subtitle":"GitHub repository","main_image_url":"https://cloud.githubusercontent.com/assets/143418/17495839/a5054eac-5d88-11e6-95fc-7290892c7bb5.png","avatar_image_url":"https://cloud.githubusercontent.com/assets/143418/15842166/7c72db34-2c0b-11e6-9aed-b52498112777.png","action":{"name":"Open in GitHub","url":"https://github.com/openstreetmap/openstreetmap-website"}},"updates":{"snippets":[{"icon":"PERSON","message":"@KaiRo-at in #1609: OK, that's all fine and good. That said, https://wiki.openstreetmap.org/wiki/API_v0.6#Uploading_traces still says \"HTTP basic authentication is required.\" - is that documentation still true? If so, then I believe we need to return to the old behavior at least just for this one API endpoint or else uploading GPS tracks is not possible at all any more.\r\n\r\nAlso, in general, it feels weird to not desupport the HTTP Auth access and make big announcements about that to the API when changing the CORS behavior like that."}],"action":{"name":"View Issue","url":"https://github.com/openstreetmap/openstreetmap-website/issues/1609#issuecomment-321666194"}}}</script>