Oauth permissions are too strict

LearnersGuild / idm

identity management service

MIT License

2 stars 24 forks source link

Oauth permissions are too strict #175

Open jeffreywescott opened 7 years ago

jeffreywescott commented 7 years ago

From ch2095

Expected vs. Actual

Expected: Basic profile + email access

Actual: When trying to authorize the Echo app with my Github account, it requests access to all private repos, as well as Organization access, which is excessive IMHO.

Screenshot

jeffreywescott commented 7 years ago

[Comment from Clubhouse user @jeffreywescott:] @prattsj: move to P4 GH?