This is to track the discussion of the future deprecation of HTTP Basic Auth and OAuth 1.0a.

See pnorman's diary and zerebubuth/openstreetmap-cgimap#286

See the deprecation announcement for dates and details:

This change will have three key dates:

• March 1st, 2024: New OAuth 1.0a application registrations are disabled. Existing applications will not be impacted. HTTP Basic Auth will not be impacted.
• May 1st, 2024: Sysadmins will start brownouts to find applications that are still using OAuth 1.0a or HTTP Basic Auth
• June 1st, 2024: OAuth 1.0a and HTTP Basic Auth will be shut down.