GitLab authentication integration for BackYourStack/OpenCollective
GitLab authentication on Open Collective
Context/Description: #212638
"You're creating software. You don't want to worry about creating a legal entity or separate bank account, paying taxes, or providing invoices to sponsors. Let us take care of all that, so you can stay focused on your project."
- In order for users to sign up for a collective, they need to have their project verified. Right now, there's an option to do that manually, or with their GitHub ID.
I believe GitHub uses OAuth for this integration:
It also appears Gitlab uses OAuth for this: https://docs.gitlab.com/ee/api/oauth2.html
OAuth integration and web application flow should be enough to grant API access. Then API calls can be made to projects and repository API to grab dependency file contents.
Why?
Support Open Source Sustainability initiatives by extending BackYourStack/OpenCollective services and functionality with private projects on GitLab.com.
Proposal:
Figure out technical details on how to integrate BYS/OpenCollective authentication with GitLab as OAuth2 provider
Goal:
Provide actionable path forward on how to integrate BackYourStack/OpenCollective functionality using GitLab authentication via OAuth2.