Useful info:

• https://www.mediawiki.org/wiki/OAuth/For_Developers
• https://meta.wikimedia.org/wiki/OAuth_app_guidelines

Had a short discussion in the Wikimedia Community discord about the appropriate OAuth flow to use. Link here: https://discord.com/channels/221049808784326656/1521924770889990144

A couple members mentioned that using an owner-only token is most likely fine to use for my use-case. Based on that, I'll go with that approach for now. If it needs to be changed in the future, I can deal with it then I'm thinking.

Later in this thread, a member of WikiMedia Foundation mentioned that readonly calls from code running in ToolForge will automatically auth to the api - no need to configure auth.

I need to give this a test and verify it works. If so, that'll be a huge help - no need to maintain OAuth config/credentials/etc.