indieweb / wordpress-indieauth

IndieAuth for WordPress
https://wordpress.org/plugins/indieauth/
MIT License
31 stars 11 forks source link

Consider Denying All Requests for Post Scope #101

Closed dshanske closed 6 years ago

dshanske commented 6 years ago

Suggesting that anyone who asks for Post Scope should instead be offered create and update scope...removing post from any new token requested.

aaronpk commented 6 years ago

I would suggest silently converting "post" to "create update" internally, not actually exposing this in the UI or blocking the request.

dshanske commented 6 years ago

Silently doing this now.