[openstreetmap/openstreetmap-website] OAuth2 support? (#1408)

[mmd]

> I'll add that master...tomhughes:doorkeeper is the current state of my work.

I ran a quick test using Postman and Authorization Code (+optionally with PKCE) and that looked good. Due to the additional secret hashing, I had to register some new apps, but that's ok.

I was about to ask, if we would always keep permission and scopes names in sync, or if it would make sense to have some more fine granular scopes (for things like #2631). `includes_scope` and its mapping onto the existing allow_* fields looks like a clever trick to avoid some extra work (like defining a new capability, or inventing new scopes). I guess that implementation answers my question then.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1408#issuecomment-712981617
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20201020/b9eaa9d8/attachment.htm>