On replacing Basic Auth with OAuth 2.0

[Matija_Nalis]

@YaronS

Generating a script that runs several workers in parallel to vandalize maps should be more restricted in a way.

While I definitely agree with that suggestion (who wouldn’t? Except vandals themselves), I fail to see how it is related to this discussion about replacing Basic Auth with OAuth2 ?

As I see it, the issue with vandalism is completely the same regardless if vandal is using Basic auth or OAuth2 bearer token in their script? It is literally single line change. Or am I missing something?

Regarding vandalism and limits, rather see / chime in this topic (and others linked to it):

How about limit new accounts?

We’ve probably seen the topics of vandalism in the last week. Our own drolbr chimed in with some more stories we likely didn’t know about. One of the main weaknesses that OSM currently has is that basically every account can do anything and everything. I’m sure some will disagree on this being a weakness, for those that think instant power is useful, I respectfully disagree. (see why at bottom of this post). The main reason this is a weakness is that vandalism is essentially trivial. Fighting…