vandre / mojito

Mojito Chrome Extension for Mint
BSD 2-Clause "Simplified" License
44 stars 16 forks source link

mojito is asking for permissions #18

Open ericwclymer opened 7 years ago

ericwclymer commented 7 years ago

It looks like you've monetized. You should probably update your readme on here and/or explain why mojito is seeking permissions that aren't reflecting in the source here.

vandre commented 7 years ago

Hi! The permissions shown in the source here are: "permissions": ["://mint.intuit.com/","://.mint.com/*","storage","activeTab","webNavigation","webRequest","webRequestBlocking"]

The permissions in the latest version are: "permissions": ["identity","://mint.intuit.com/","https://www.googleapis.com/","storage","activeTab","webRequest","webRequestBlocking"]

Added: Identity, googleapis

Removed: webNavigation, mint.com

Identity and and Google Apis are required for checking trial status.

I removed webNavigation to get rid of the message 'extension is requesting access to view history'. Now I use messaging + storage api to determine date filters instead of sniffing the query string

ericwclymer commented 7 years ago

Ah, ok. That makes sense. Most of my confusion came from the fact that the version number on the web store was 1.59, but manifest.json shows 1.56 still.

vandre commented 7 years ago

Sure no problem! 1.59 is closed source, hence why I did not update the manifest.json here.