3 ms·
Scary. Gotta be super careful about granting scopes. I use signin with google all the time - just to avoid creating new passwords. Imagine if I accidentally gra
by osigurdson 4y ago
Scary. Gotta be super careful about granting scopes. I use signin with google all the time - just to avoid creating new passwords. Imagine if I accidentally grant the scope for a random site to read all emails. I hope that isn't even possible but I imagine it is - it likely would be fairly nonchalantly displayed in the list of scopes. I'm a developer who has implemented OIDC flows so in theory I should know better. What about everyone else?
- anon84873628 4y agoGoogle requires public oauth apps to go through a registration and review process. And requesting special privileged/sensitive scopes (like access to read email) causes increased scrutiny. I believe users are also warned about apps with sensitive access on an ongoing basis. Certainly not foolproof but hopefully helps assuage your greatest fears.
- osigurdson 4y agoGood to know.