[openstreetmap/openstreetmap-website] Explain "Redirect URIs" and "Confidential applications" when creating an OAuth 2 application (Issue #5714)

[Tom Hughes]

tomhughes left a comment (openstreetmap/openstreetmap-website#5714)

Well the redirect URI is something your client library documentation should be telling you - you really don't want to be rolling your own OAuth when there are plenty of libraries that have already done it. Basically it's the URL the authentication will redirect back to after the client has been authorised.

If this is for a command line client then use `urn:ietf:wg:oauth:2.0:oob` as the URI and it won't redirect and will instead display the authorization code for you to copy and paste.

The confidential application flag just indicates whether you are able to keep the client details secret (ie confidential) or whether they will be shipped with an application.

The [wiki has more details](https://wiki.openstreetmap.org/wiki/OAuth#Registering_your_application_as_OAuth_2.0_consumer).

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/5714#issuecomment-2675351888
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/5714/2675351888 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20250221/d46f0c98/attachment.htm>