Scope of social networks permissions and data requested from participants

[patcon]

Re-ticketed from Gitter chat.

This is just a stub. Will flesh out later.

Current Status

• currently, we allow login via email, Facebook, and Twitter
  • Registering via email is circuitous and not evident from participation interface, and so essentially not possible from non-admin perspective.
  • in progress: #253 downscaling facebook perm scope via server-level config
• Facebook login requests permission scopes of email and user_friends

  • todo why?

• Twitter login requests permissions for email and read-only account access.

  • todo what API calls are made? GET /blocks/list? GET /mutes/users/list? why?

[patcon]

From Gitter:

@colinmegill: We have a request, which I agree with, to downscope what we’re asking for from twitter and facebook API. we ask for block lists from twitter, someone brought up this isn’t really necessary

we had an idea to show friends in the viz etc, but this seems like, at this point, we should be downscoping these things to just email

Interested in thoughts, generally, and thoughts on potential impacts (to the codebase)

@patcon: seeing faces of people i knew seemed really important to my personal experience with the visualization. and my understanding of social physics research tells me that this is psychologically important. will find citation. EDIT: https://sci-hub.tw/10.5465/AMBPP.2010.54492403

also, re: ppl asking for them to be downscaled -- i'd be curious to know whether they're asking to remove this in the abstract (based on larger concerns with these platforms) or whether they've actively particaipted in a large convo that they care about, and found it unimportant

@colinmegill we should revisit and what you are bringing up is the argument. they haven’t participated