Re:Software developers scan emails of users who sign up for ...
by Alex3917 on Monday July 02, 2018 @04:59PM
(#17445298)
> Are these permissions strictly enforced?
Yes, each of those items corresponds to an OAuth scope. If you try to make an API call for data that isn't covered by the OAuth scopes you have access to, you'll just get an error.
Developers can add broader OAuth scopes to their apps at any point, but if they do then all their users will need to re-authenticate and will see that the app now requires additional permissions.
Yes, each of those items corresponds to an OAuth scope. If you try to make an API call for data that isn't covered by the OAuth scopes you have access to, you'll just get an error.
Developers can add broader OAuth scopes to their apps at any point, but if they do then all their users will need to re-authenticate and will see that the app now requires additional permissions.
C.f.: https://developers.google.com/gmail/add-ons/concepts/scopes