Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Reply to @romin@shitposter.world
Blurry Moon@sun@shitposter.world (2026-08-15 20:53:13)
@romin no read:accounts just lets you read user data not impersonate. You have to have write role to make posts as someone
---Reply---
ロミンありん@romin@shitposter.world (2026-08-15 21:26:31)
@sun I mean a miniapp using the token to freely interact with another miniapp

---Replies---

Blurry Moon@sun@shitposter.world (2026-08-15 21:42:17)
@romin there’s no mechanism to share the token passed to a miniapp to another miniapp unless both are controlled by the same author (or collusion)

I’m already working on submitting an enhancement to pleroma for an identity token that contains no private information incidentally and then making the miniapp standard very strongly press only public identity verification without extra click through.