The Sign Up with Google Mistake You Can't Fix

Re:The Sign Up with Google Mistake You Can't Fix by magicalist on Tuesday March 01, 2016 @05:32PM (#11206661)

> "What's nice about OAuth is that it allows the end user to control access to information and revoke access as needed." Really? This has NEVER been my experience with OAuth or similar protocols

Github is a great example of handling OAuth scopes: https://developer.github.com/v3/oauth/#scopes

(you're right that it's often not used, though. I tried bitbucket and gitlab and both appear to only have a single scope)

[ Parent | on HN ]

Re:The Sign Up with Google Mistake You Can't Fix by sytse on Tuesday March 01, 2016 @06:08PM (#11206882)

GitLab indeed has a single scope, we would love to improve this https://gitlab.com/gitlab-org/gitlab-ce/issues/13951

[ Parent | on HN ]

Re:The Sign Up with Google Mistake You Can't Fix by detaro on Tuesday March 01, 2016 @07:59PM (#11207448)

And even Github often gets complaints that you can't limit it to e.g. a single repo.

[ Parent | on HN ]