3 ms·
Absolutely right. LinkedIn is doing this. access for one day, one week, ... when granting permissions.
by baconner 16y ago
Absolutely right. LinkedIn is doing this. access for one day, one week, ... when granting permissions.
- deno 16y agoHere's screenshot of how it looks: http://developer.linkedin.com/servlet/JiveServlet/downloadImage/38-1039-1130/400-276/oauth_window_screenshot.png http://developer.linkedin.com/servlet/JiveServlet/downloadIm... However the reason LinkedIn does it is probably because the nature of information accessed is very fragile. Similar, but slightly different solution, I'd suggest, would be to track by provider if application is actively used and perhaps revoke token after some period of time (or at least present user with that data on their profile settings page).