<p></p>
<p dir="auto">There aren't any secrets for those who can access an app. Almost. The app may not reveal all of its possible permissions and all of its redirect urls. But at least one redirect url and some permission are going to be visible to all its users.</p>
<p dir="auto">However if the app is not published anywhere, nobody knows its client_id, permissions, urls. Removing the show restriction would allow anyone to go through all of the apps by opening <a href="https://www.openstreetmap.org/oauth2/applications/1" rel="nofollow">https://www.openstreetmap.org/oauth2/applications/1</a> <a href="https://www.openstreetmap.org/oauth2/applications/2" rel="nofollow">https://www.openstreetmap.org/oauth2/applications/2</a> <a href="https://www.openstreetmap.org/oauth2/applications/3" rel="nofollow">https://www.openstreetmap.org/oauth2/applications/3</a> etc. Is that ok?</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/issues/4103#issuecomment-1652103032">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLLKQQ27PVVLFVLOS3LXSE5KNANCNFSM6AAAAAA2VNJUXY">unsubscribe</a>.<br />You are receiving this because you are subscribed to this thread.<img src="https://github.com/notifications/beacon/AAK2OLJTOMCRSWBWREW4DODXSE5KNA5CNFSM6AAAAAA2VNJUX2WGG33NNVSW45C7OR4XAZNMJFZXG5LFINXW23LFNZ2KUY3PNVWWK3TUL5UWJTTCPELXQ.gif" height="1" width="1" alt="" /><span style="color: transparent; font-size: 0; display: none; visibility: hidden; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0; mso-hide: all">Message ID: <span><openstreetmap/openstreetmap-website/issues/4103/1652103032</span><span>@</span><span>github</span><span>.</span><span>com></span></span></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/openstreetmap/openstreetmap-website/issues/4103#issuecomment-1652103032",
"url": "https://github.com/openstreetmap/openstreetmap-website/issues/4103#issuecomment-1652103032",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>