15 years ago when we first came out with our API, we provided for access via a Login. This was before Oauth1 and OAuth2 support. We now expect all new users of the API to use our OAuth2, and are strongly encouraging all users to move to this more modern, flexible and secure alternative. This is what we use ourselves for all of our apps like RaceDay Scoring, RaceDay Checkin, etc.
Effective February 1, we will be blocking unknown user agents for the Login Access (only RunScore and Race Director applications can use this old access method). All other users of the API will need to move to OAuth 2.
Effective April 1, we will be blocking old OAuth 1 applications. Again, users of OAuth 1 will need to move to OAuth 2.
There are several vendors, particularly timing software vendors, who are in the process of updating their software to improve security. It will require those users of that software to upgrade to a new version.
We appreciate the efforts of our third party software providers to keep the RunSignup system as secure as possible for everyone.