id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
23732	Change default oauth2 token and authorize URLs from /api to /oauth2	Woazboat	team	"JOSM is currently using `<OSM server API URL>/token` and `<OSM server API URL>/authorize` as the default token access and authorize URLs. 
E.g. for the server API URL `http://localhost:31500/api` the default URLs would be set to `http://localhost:31500/api/token` and `http://localhost:31500/api/authorize`

The rails port exposes these endpoints under `/oauth2` and not under `/api`:

https://github.com/openstreetmap/openstreetmap-website/blob/master/config/routes.rb#L2-L8

The default URLs for the example above should therefore be `http://localhost:31500/oauth2/token` and `http://localhost:31500/oauth2/authorize`.

The .well-known oauth file for openstreetmap.org also reflects this:
https://www.openstreetmap.org/.well-known/oauth-authorization-server

(Of course this is only really an issue when using a custom server that does not expose a .well-known file for oauth)"	defect	new	minor		Core			oauth2