[openstreetmap/openstreetmap-website] OAuth2 support? (#1408)

[Tom Hughes]

Yes if an application doesn't specify any scopes then all scopes are allowed - unfortunately it's not easy to change.

As best I could tell when looking at it yesterday we'd have to override the application model and add an extra validation to it that prevented creating applications with no scopes, which is possible but a bit of a pain so I guess it depends on how important we think it is.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1408#issuecomment-818975146
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20210413/e73fc052/attachment.htm>