[openstreetmap/openstreetmap-website] OAuth2 support? (#1408)

[mmd]

One issue I'd like to report right away before I forget about it. I noticed that I can register a new application without any scopes, and then later successfully request a token for whatever scope I like. My expectation would be that "allow_api" shouldn't match an empty set of permitted scopes.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1408#issuecomment-818001784
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20210412/3b06545c/attachment.htm>