3 ms·
That's one of the nicer things about these flows: you can have scoped data that is allowed, and nothing more. The ideal use case here is for banks, and service
by rdegges 8y ago
That's one of the nicer things about these flows: you can have scoped data that is allowed, and nothing more.
The ideal use case here is for banks, and services that store a lot of sensitive data. If you want to pull your data from your bank into a service like Mint, you would ideally like for Mint to only get read access to your transactions, nothing else: no ability to send $$$, etc.
- qwerty456127 8y ago> That's one of the nicer things about these flows: you can have scoped data that is allowed, and nothing more. IIRC the user is rarely given a choice, same as when you install an Android app from the Google Play store - they just tell you the app demands to access this and that an give you an Ok/Cancel choice instead of options to allow or disallow access to every particular element in the app's demands list and still install it regardless to what does the app author want (I don't mind if some features won't work then). IMHO this is seriously wrong.