On Mon, May 9, 2011 at 3:13 AM, Frederik Ramm <frede...@remote.org> wrote: > Hi, > > On 05/09/2011 06:21 AM, Serge Wroclawski wrote: >> >> The API is RESTful, and therefore should hold no state. OAuth is >> precisely the opposite of that. > > One could argue that at least the write API (which is the one mainly > requiring authentication) is stateful already because you have to open a > changeset and refer to that in every request.
They could argue that, but they would be wrong. :) Statefulness in this context refers to the connection state. Neither the server nor client should be have to keep any connection state in between HTTP connections.. Changesets aren't part of the HTTP connection state. - Serge _______________________________________________ talk mailing list talk@openstreetmap.org http://lists.openstreetmap.org/listinfo/talk
