<p></p>
<p><b>@tyrasd</b> commented on this pull request.</p>

<hr>

<p>In <a href="https://github.com/openstreetmap/openstreetmap-website/pull/3492#discussion_r888823820">CONFIGURE.md</a>:</p>
<pre style='color:#555'>>  id_key: "8lFmZPsagHV4l3rkAHq0hWY5vV3Ctl3oEFY1aXth"
 ```
 
-Follow the same process for registering and configuring the website/Notes (`oauth_key`), or to save time, simply reuse the same consumer key for each.
+To allow [Notes](https://wiki.openstreetmap.org/wiki/Notes) and changeset discussions to work, follow a similar process, this time registering an OAuth 2 application for the web site:
+
+* Go to "[OAuth 2 applications](http://localhost:3000/oauth2/applications)" on the My settings page.
+* Click on "Register new application".
+* Use Name: "OpenStreetMap Web Site" and Redirect URIs: "http://localhost:3000"
+* Check boxes for the following Permissions
+  * 'Modify the map'
+  * 'Modify notes'
+* On the next page, copy the "Client Secret" and "Client ID"
+* Edit config/settings.local.yml in your rails tree
+* Add the "oauth_application" configuration with the "Client ID" as the value
+* Add the "oauth_key" configuration with the "Client Secret" as the value
</pre>
<p dir="auto">is this really necessary? I don't immediately find anything in the code which uses this setting (<a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/openstreetmap/openstreetmap-website/commit/b4a1e41968e1befdf6fc14715d95549f5537abca/hovercard" href="https://github.com/openstreetmap/openstreetmap-website/commit/b4a1e41968e1befdf6fc14715d95549f5537abca"><tt>b4a1e41</tt></a> appears to have removed previous occurrences where it was used for oauth1) and the <code class="notranslate">settings.yml</code> now only mentions the <a href="https://github.com/openstreetmap/openstreetmap-website/blob/73f0be96472a8d021a6347953192ca7b6ec509d7/config/settings.yml#L82-L83"><code class="notranslate">oauth_application</code></a> setting. I tried running the website locally without the <code class="notranslate">oauth_key</code> setting and it seems to work just fine.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/pull/3492#pullrequestreview-994737286">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLPASEIT5EVUJMZYYMLVNHM2ZANCNFSM5QGIBAQA">unsubscribe</a>.<br />You are receiving this because you are subscribed to this thread.<img src="https://github.com/notifications/beacon/AAK2OLJCOJTTRPBDOXT3SILVNHM2ZA5CNFSM5QGIBAQKYY3PNVWWK3TUL52HS4DFWFIHK3DMKJSXC5LFON2FEZLWNFSXPKTDN5WW2ZLOORPWSZGOHNFHZBQ.gif" height="1" width="1" alt="" /><span style="color: transparent; font-size: 0; display: none; visibility: hidden; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0; mso-hide: all">Message ID: <span><openstreetmap/openstreetmap-website/pull/3492/review/994737286</span><span>@</span><span>github</span><span>.</span><span>com></span></span></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/openstreetmap/openstreetmap-website/pull/3492#pullrequestreview-994737286",
"url": "https://github.com/openstreetmap/openstreetmap-website/pull/3492#pullrequestreview-994737286",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>