Why full mastodon permissions #2768
-
|
I was wondering why the platform requires the full access to your entire account when you connect it with mastodon? If all you wanted to do is push a check in to mastodon then it shouldn't need the full permissions though right? |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
|
You're right. The problem is the following: Our old mastodon library had a bug and didn't allow anything except read/write scopes. It's technically possible now to change it, but we would have to rewrite a huge chunk of our login/social posting code to handle both "old" keys with their scopes and the new ones with reduced scopes. Also we would have to re-authenticate all users and about 500 instances. Which is a lot. |
Beta Was this translation helpful? Give feedback.
-
|
I've put some information into #2666, since this is a known issue with third party mastodon-services and nobody didn't notice that it's also mastodon itself. 🫣 |
Beta Was this translation helpful? Give feedback.
You're right. The problem is the following: Our old mastodon library had a bug and didn't allow anything except read/write scopes. It's technically possible now to change it, but we would have to rewrite a huge chunk of our login/social posting code to handle both "old" keys with their scopes and the new ones with reduced scopes. Also we would have to re-authenticate all users and about 500 instances. Which is a lot.