[LEDE-DEV] github oauth for webpage editing requests too many permission

[Martin Tippmann]

On Wed, Jun 7, 2017 at 5:00 PM, Karl Palsson <karlp at tweak.net.au> wrote:
>
> Hi,
>
> I was trying to fix something on the documentation pages of
> lede-project today, and tried to login with github.
>
> However, the docuwiki/oauth thing is demanding full read/write
> access to my account, which seems.... excessive...

Hi, we already noticed this:
http://lists.infradead.org/pipermail/lede-dev/2016-October/003099.html

https://github.com/cosmocode/dokuwiki-plugin-oauth/issues/41

Looks like the original plugin is still not updated.


> ```
> LEDE Project (lede-project.org) by lede-project
> wants to access your karlp account
> Personal user data
> Full access
> This application will be able to read and write all user data.
> This includes the following:
>
> Private email addresses
> Private profile information
> Followers
> Learn more
> ```
>
> Can someone perhaps reconfigure that to request only what's
> necessary to do an oauth login for editing, not granting access
> to the account?

Yes. That's not okay.

regards
Martin