biothings / discovery-app

The Data Discovery Engine project by the CD2H Data working-group
http://discovery.biothings.io
Apache License 2.0
4 stars 12 forks source link

Write authorization required by DDE when logging in with Github credentials #131

Open frmichel opened 2 years ago

frmichel commented 2 years ago

Hi, when I log in with my Github credentials, DDE requests write access to all of my repositories, beyond just Bioschemas-related repos which are the ones I'm interested in. That seems quite dangerous to allow any application write access to any of my repos.

Would there be a way to have DDE request only authorizations related to some specific repos?

marcodarko commented 2 years ago

Hi @frmichel We are trying to figure a GitHub scope that limits to user repos only, but seems like the options they have seem to pull also other organizations that user is part of. Just wanted to let you know we are looking into and are aware of the issue so we appreciate your patience in the meantime.

frmichel commented 2 years ago

Hi @marcodarko, ok thx for the update.