Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Excessive Permissions Requested for GitHub Authentication #330

Open
Samk13 opened this issue May 29, 2024 · 0 comments
Open

Excessive Permissions Requested for GitHub Authentication #330

Samk13 opened this issue May 29, 2024 · 0 comments

Comments

@Samk13
Copy link
Member

Samk13 commented May 29, 2024

Package version (if known): V12 lastest

Describe the bug

The application requests excessively wide permissions from GitHub, including full access to personal user data.

Steps to Reproduce

  1. Go to the login page.
  2. Click on "Sign in with GitHub".
  3. Observe the permissions requested.

Expected behavior

The application should request only the necessary scopes to function correctly, such as read:user and user:email.

Screenshots (if applicable)

image

Additional context

To address this issue, update the GitHubOAuthSettingsHelper class in the configuration to use:

request_token_params={"scope": "read:user user:email"}

see: https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/scopes-for-oauth-apps

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant