Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Reply to @sun@shitposter.world
ロミンありん@romin@shitposter.world (2026-08-05 21:02:29)
@sun I wouldn't mind miniapps if they had better scope isolation, but then again oauth scopes are really barebones on mastodon
---Reply---
Blurry Moon@sun@shitposter.world (2026-08-05 21:04:23)
@romin haruspex in fact only requests the ability to view your profile details, effectively it's only checking that you successfully authenticated and requests no other rights. open farm game is ridiculously overprivileged, yes. a normal application should only request identification of a user.

---Replies---

ロミンありん@romin@shitposter.world (2026-08-05 21:17:37)
@sun the least privileged scope is still read, which gives full read access to your account plus full read access to your profile details like email and the like