[openstreetmap/openstreetmap-website] Add support for OAuth 2 (#3177)

[mmd]

I think https://tools.ietf.org/html/rfc8252#section-7.3 would be relevant here. Note the following requirement regarding 127.0.0.1:

> The authorization server MUST allow any port to be specified at the
>    time of the request for loopback IP redirect URIs, to accommodate
>    clients that obtain an available ephemeral port from the operating
>    system at the time of the request.

I'm not sure if doorkeeper already allows any port for loopback communication.

Section 7.1 ("Private-Use URI Scheme Redirection") also seems interesting for mobile apps. It would be good if more mobile app devs could join this discussion, to see what requirements they have.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/3177#issuecomment-822586164
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20210419/c2394b13/attachment.htm>