Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Blurry Moon@sun@shitposter.world (2026-08-05 21:00:10)
haruspex has way better oauth detection now
---Reply---
ロミンありん@romin@shitposter.world (2026-08-05 21:02:29)
@sun I wouldn't mind miniapps if they had better scope isolation, but then again oauth scopes are really barebones on mastodon

---Replies---

Blurry Moon@sun@shitposter.world (2026-08-05 21:04:23)
@romin haruspex in fact only requests the ability to view your profile details, effectively it's only checking that you successfully authenticated and requests no other rights. open farm game is ridiculously overprivileged, yes. a normal application should only request identification of a user.

Blurry Moon@sun@shitposter.world (2026-08-05 21:18:07)
@romin I am considering rewriting the approval so that the typical app only verifies login; and if the application wants any permission to read and/or write from your account, it makes it VERY clear that this is dangerous and gives you lots of outs.