OAuth2

[michellaurent]

Instead of requiring the user private token, use OAuth2 for api calls.

http://doc.gitlab.com/ce/api/oauth2.html

Maybe the best way to add this feature, is to create a new plugin gitlab_oauth...

[tyler-sommer]

This is a good idea, unfortunately Composer is not in great shape for this. They do support OAuth2 for both GitLab and GitHub, but from what I saw in the last few hours, the support is pretty sketchy.

I'll keep this in mind as I continue working on the 3.2 release.