search

LeaVerou / dabblet

An interactive CSS playground
http://dabblet.com
816 stars 147 forks source link

Dabblet requires strange permissions #231

Closed m-r-r closed 10 years ago

m-r-r commented 11 years ago

Hello,

I regularly use Dabblet, and today I tried to save a piece of code on Gist. I clicked the "Login" button to log in to my GitHub account, and here is what I saw:

dabblet-wtf.png

Seriously, does Dabblet really needs to be able to change my email address and edit my followers, in order to POST a piece of code on Gist ?! And why does it needs to read my notifications and my commits ?

kohenkatz commented 10 years ago

Even worse, the new Github OAuth page says that this includes:

This application will be able to read and write all user data including private email addresses, SSH keys, profile information, and followers.

WHAT?!?!?!

LeaVerou commented 10 years ago

You can see what code it's using in the dabblet repo. If there's any way to request more granular control (it only needs to read profile info and read/write followers for when you click the follow button), PRs are welcome. :)