News for hackers. Stuff that matters.

A comment on The Good and the Bad of OAuth 2.0 Authorization Implementations. Parent comment

Re:The Good and the Bad of OAuth 2.0 Authorization Implement... by X-Istence on Sunday January 27, 2013 @09:55PM (#5126845)
As a user I am actually okay with this. That way if I haven't visited a website in a long time, then most likely they should no longer have access to my account.

Maybe I've long moved on and forgotten about that one site that I authorised and now they are using my data in a way that I wouldn't approve of.

[ Parent | on HN ]
Re:The Good and the Bad of OAuth 2.0 Authorization Implement... by johns on Sunday January 27, 2013 @09:59PM (#5126854)
The tricky part is for services like IFTTT (where I used to work) and Zapier (where the GP works) where you do want an authorization to be indefinite and not require user interaction because it's a background job.
[ Parent | on HN ]