I think it makes sense to allow temp users to use OAuth apps (although this puts some burden on app developers to e.g. be ready of the preferences API not being available for some users, but then very few OAuth apps use preferences). It probably doesn't make sense to let them author OAuth apps.

@Madalina do you have an opinion on this from a product perspective? There is also a discussion here https://www.mediawiki.org/wiki/Talk:Trust_and_Safety_Product/Temporary_Accounts

Has there been a consensus on this? My understanding is that temporary users can be allowed to use OAuth apps at a later if we restrict it now.

In T344721#10172735, @Amdrel wrote:

Has there been a consensus on this? My understanding is that temporary users can be allowed to use OAuth apps at a later if we restrict it now.

We should not let temporary accounts use the SpecialMWOauth* pages for now. We might change this later. See also Update error message for temp users trying to use special pages which has some overlap with this task ( cc @Dreamy_Jazz).

I took a look and the checks were already adjusted in the following patch https://gerrit.wikimedia.org/r/c/mediawiki/extensions/OAuth/+/993162 (T355378).

In T344721#10173126, @Amdrel wrote:

I took a look and the checks were already adjusted in the following patch https://gerrit.wikimedia.org/r/c/mediawiki/extensions/OAuth/+/993162 (T355378).

Thanks for checking. In which case, I think we can close this task as the change to allow temporary accounts would probably be at a later stage and to be done in a new task.