4 ms·
i'm not deeply familiar with OAuth, but it seems that each access token should have not just a revoke ability for the granter, but also a TTL/expiration date wh
by leeoniya 15y ago
i'm not deeply familiar with OAuth, but it seems that each access token should have not just a revoke ability for the granter, but also a TTL/expiration date which can be altered or seen. i'm also not sure if there are more granular permissions or differentiating tokens, perhaps i want to share my contacts/address book but not my email, and only up to a max of 3 requests per month...
- Folcon 15y agoOr just to login with a service as that's probably most people's most prevalent reason to use oauth? I'm surprised that gmail don't have a permissions system like facebook, it concerns me that right now it's such an all or nothing option.
- deleted 15y ago[deleted]
- slavak 15y agoYou can use OAuth with your Google account to login to other services without granting them any other permissions. The few apps I've granted access to have a single permission that says "Sign in using your Google account."
- deleted 15y ago[deleted]
- shaka881 15y agoSeems like it would be an easy thing to do from the OAuth provider's end - in addition to showing the scopes, you can put it into a few easy buckets: 24 hours, 7 days, 1 month, 1 year, indefinitely