<span style="color: transparent; display: none; height: 0; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; mso-hide: all; visibility: hidden; width: 0;">
  <blockquote>
<p dir="auto">You don't enter username/password during an Oauth2 flow. You enter them before that if you're not actually logged in because the authorization page redirects you to the login page in this case.</p>
</blockquote>
<p dir="auto">Well, that's what I meant. When I'm redirected to some page (like <code class="notranslate">https://www.openstreetmap.org/login?referer=%2Foauth2%2Fauthorize...</code>) I consider that page <em><strong>too</strong></em> part of the Oauth2 flow (as evidented by string <em>"oauth2"</em> inside that referer, indicating it was Oauth2 which sent me there).</p>
<p dir="auto">But if you prefer different terminology for URLs which are called by <code class="notranslate">www.openstreetmap.org/oauth2/*</code> but are not inside that same "directory" (i.e. URL prefix), I'll be happy to oblige.</p>
<blockquote>
<p dir="auto">There's ony one somewhere where you enter username/password - the login page, if we ignore apps with very questionable login practices like Organic maps.</p>
</blockquote>
<p dir="auto">well, I am not the one to call it questionable or not. 🤷  If those are unwanted, we could perhaps employ  countermeasures to disallow them? (or at least open issues at their issue trackers to explain why we don't want those, and what are the acceptable alternatives?)</p>
<hr>
<p dir="auto">Anyway, if I've (hopefully) managed to clarify the ambiguity in terminology used; what do you think of <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2780907702" data-permission-text="Title is private" data-url="https://github.com/openstreetmap/openstreetmap-website/issues/5490" data-hovercard-type="issue" data-hovercard-url="/openstreetmap/openstreetmap-website/issues/5490/hovercard?comment_id=2602015806&comment_type=issue_comment" href="https://github.com/openstreetmap/openstreetmap-website/issues/5490#issuecomment-2602015806">#5490 (comment)</a> ?</p>
<p dir="auto">To me the advantages would be that the users become aware of the blocks more often then they do now; are there disadvantages that would outweigh those?</p><p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/issues/5490#issuecomment-2815414414">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLJJ2GX4TMXSUVI35SD22DZ7VAVCNFSM6AAAAABU67LUOOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQMJVGQYTINBRGQ">unsubscribe</a>.<br />You are receiving this because you are subscribed to this thread.<img src="https://github.com/notifications/beacon/AAK2OLMUWKDMP4ILI5JI3ZL22DZ7VA5CNFSM6AAAAABU67LUOOWGG33NNVSW45C7OR4XAZNMJFZXG5LFINXW23LFNZ2KUY3PNVWWK3TUL5UWJTVHZ7II4.gif" height="1" width="1" alt="" /><span style="color: transparent; font-size: 0; display: none; visibility: hidden; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0; mso-hide: all">Message ID: <span><openstreetmap/openstreetmap-website/issues/5490/2815414414</span><span>@</span><span>github</span><span>.</span><span>com></span></span></p>
</span>


<div style="display: flex; flex-wrap: wrap; white-space: pre-wrap; align-items: center; "><img height="20" width="20" style="border-radius:50%; margin-right: 4px;" decoding="async" src="https://avatars.githubusercontent.com/u/156656?s=20&v=4" /><strong>mnalis</strong> left a comment <a href="https://github.com/openstreetmap/openstreetmap-website/issues/5490#issuecomment-2815414414">(openstreetmap/openstreetmap-website#5490)</a></div>
<blockquote>
<p dir="auto">You don't enter username/password during an Oauth2 flow. You enter them before that if you're not actually logged in because the authorization page redirects you to the login page in this case.</p>
</blockquote>
<p dir="auto">Well, that's what I meant. When I'm redirected to some page (like <code class="notranslate">https://www.openstreetmap.org/login?referer=%2Foauth2%2Fauthorize...</code>) I consider that page <em><strong>too</strong></em> part of the Oauth2 flow (as evidented by string <em>"oauth2"</em> inside that referer, indicating it was Oauth2 which sent me there).</p>
<p dir="auto">But if you prefer different terminology for URLs which are called by <code class="notranslate">www.openstreetmap.org/oauth2/*</code> but are not inside that same "directory" (i.e. URL prefix), I'll be happy to oblige.</p>
<blockquote>
<p dir="auto">There's ony one somewhere where you enter username/password - the login page, if we ignore apps with very questionable login practices like Organic maps.</p>
</blockquote>
<p dir="auto">well, I am not the one to call it questionable or not. 🤷  If those are unwanted, we could perhaps employ  countermeasures to disallow them? (or at least open issues at their issue trackers to explain why we don't want those, and what are the acceptable alternatives?)</p>
<hr>
<p dir="auto">Anyway, if I've (hopefully) managed to clarify the ambiguity in terminology used; what do you think of <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2780907702" data-permission-text="Title is private" data-url="https://github.com/openstreetmap/openstreetmap-website/issues/5490" data-hovercard-type="issue" data-hovercard-url="/openstreetmap/openstreetmap-website/issues/5490/hovercard?comment_id=2602015806&comment_type=issue_comment" href="https://github.com/openstreetmap/openstreetmap-website/issues/5490#issuecomment-2602015806">#5490 (comment)</a> ?</p>
<p dir="auto">To me the advantages would be that the users become aware of the blocks more often then they do now; are there disadvantages that would outweigh those?</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/issues/5490#issuecomment-2815414414">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLJJ2GX4TMXSUVI35SD22DZ7VAVCNFSM6AAAAABU67LUOOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQMJVGQYTINBRGQ">unsubscribe</a>.<br />You are receiving this because you are subscribed to this thread.<img src="https://github.com/notifications/beacon/AAK2OLMUWKDMP4ILI5JI3ZL22DZ7VA5CNFSM6AAAAABU67LUOOWGG33NNVSW45C7OR4XAZNMJFZXG5LFINXW23LFNZ2KUY3PNVWWK3TUL5UWJTVHZ7II4.gif" height="1" width="1" alt="" /><span style="color: transparent; font-size: 0; display: none; visibility: hidden; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0; mso-hide: all">Message ID: <span><openstreetmap/openstreetmap-website/issues/5490/2815414414</span><span>@</span><span>github</span><span>.</span><span>com></span></span></p>

<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/openstreetmap/openstreetmap-website/issues/5490#issuecomment-2815414414",
"url": "https://github.com/openstreetmap/openstreetmap-website/issues/5490#issuecomment-2815414414",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>