<p></p>
<p>I'm testing <a href="https://osmlab.github.io/osm-auth/" rel="nofollow">https://osmlab.github.io/osm-auth/</a>  which is still based on OAuth 1.0a. For some reason, unchecking permissions doesn't seem to have an impact anymore. Unless my memory isn't playing some bad tricks here, but i'm pretty confident this used to work before when OAuth 2.0 wasn't yet in place.</p>
<h2>Steps to reproduce</h2>
<ol start="0">
<li>
<p>Navigate to <a href="https://osmlab.github.io/osm-auth/" rel="nofollow">https://osmlab.github.io/osm-auth/</a></p>
</li>
<li>
<p>Hit the login button:</p>
</li>
</ol>
<p><a target="_blank" rel="noopener noreferrer" href="https://user-images.githubusercontent.com/5842757/124137391-f02e3e00-da85-11eb-9b2a-fadc907828b9.png"><img src="https://user-images.githubusercontent.com/5842757/124137391-f02e3e00-da85-11eb-9b2a-fadc907828b9.png" alt="image" style="max-width:100%;"></a></p>
<ol start="2">
<li>
<p>Sign in (if needed)</p>
</li>
<li>
<p>In the popup, uncheck "read your user preferences":</p>
</li>
</ol>
<p><a target="_blank" rel="noopener noreferrer" href="https://user-images.githubusercontent.com/5842757/124137131-ae9d9300-da85-11eb-9629-3fd9f15af4b3.png"><img src="https://user-images.githubusercontent.com/5842757/124137131-ae9d9300-da85-11eb-9629-3fd9f15af4b3.png" alt="image" style="max-width:100%;"></a></p>
<ol start="4">
<li>Hit "Grant Access".</li>
</ol>
<h2>Result</h2>
<p><a href="https://www.openstreetmap.org/api/0.6/user/details" rel="nofollow">https://www.openstreetmap.org/api/0.6/user/details</a> returns all details, although the client application isn't allowed to read my user preferences:</p>
<p><a target="_blank" rel="noopener noreferrer" href="https://user-images.githubusercontent.com/5842757/124137287-d260d900-da85-11eb-8c72-eeb1cd260517.png"><img src="https://user-images.githubusercontent.com/5842757/124137287-d260d900-da85-11eb-8c72-eeb1cd260517.png" alt="image" style="max-width:100%;"></a></p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/issues/3241">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLOZ4A4L2U74LJSJ6F3TVRZ2ZANCNFSM47U2AWQA">unsubscribe</a>.<img src="https://github.com/notifications/beacon/AAK2OLIPX4LMJJZ4R44MVQDTVRZ2ZA5CNFSM47U2AWQKYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4N5ZLK5Q.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/openstreetmap/openstreetmap-website/issues/3241",
"url": "https://github.com/openstreetmap/openstreetmap-website/issues/3241",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>