4 ms·
If you are surprised about the access requests when authenticating on GitHub. It seems like they couldn't ask for less than "all your public repos". (as amirmc
by epsylon 13y ago
If you are surprised about the access requests when authenticating on GitHub. It seems like they couldn't ask for less than "all your public repos".
(as amirmc mentioned, check out the FAQ : http://www.realworldocaml.org/#faq http://www.realworldocaml.org/#faq)
- amirmc 13y agoYeah, that seems odd to people the first time. The experience is pretty nice though, since you get all the good stuff from the GitHub issue tracker when you join/create a thread (e.g. dealing with follow-ups by email).
- qu4z-2 13y agoLet me guess... they're using OAuth as an authentication protocol, and it's working weirdly 'cause it's an authorization protocol?
- amirmc 13y agoYou don't need to guess. It is explained in the FAQ. "We just want the ability to create issues in one specific public repository, but the minimum privileges we can request from Github are the ones you see when you login." http://www.realworldocaml.org/#faq http://www.realworldocaml.org/#faq
- qu4z-2 13y agoAh, that's quite reasonable actually. Forgive my bitterness.
- arjunnarayan 13y agoMercifully not. They want to get authorization to post under your name in one single public comments repository (so that when you comment it's all managed by them in their repository). But Github OAuth (they claim) doesn't have that level of fine grained permissions - they can only request permission to post to all repositories in your name.