[openstreetmap/openstreetmap-website] OAuth2 support? (#1408)

[mmd]

It seems that cgimap would at least need to call an Introspection endpoint via HTTP(S) to validate a user-provided token and get further details such as user ids, scopes and whatnot (https://tools.ietf.org/html/rfc7662#section-2). 

As we share the same database anyway, there might be some way to directly query the respective doorkeeper tables, as we do today with OAuth 1.0a  (https://doorkeeper.gitbook.io/guides/internals/database-design).

Most of the work to get this up and running seems to be on the Rails side of the house this time.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1408#issuecomment-691714441
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20200913/29649114/attachment.htm>