Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail


Reply to @romin@shitposter.world
Blurry Moon@sun@shitposter.world (2026-08-05 21:04:23)
@romin haruspex in fact only requests the ability to view your profile details, effectively it's only checking that you successfully authenticated and requests no other rights. open farm game is ridiculously overprivileged, yes. a normal application should only request identification of a user.

---Reply--- ロミンありん@romin@shitposter.world (2026-08-05 21:17:37) @sun the least privileged scope is still read, which gives full read access to your account plus full read access to your profile details like email and the like
Reply

---Replies---
Blurry Moon@sun@shitposter.world (2026-08-05 21:26:53)
@romin as far as I can tell nothing either of my miniapps requests gets you the user email