I
I
Ivan2011-05-25 10:49:24
Google
Ivan, 2011-05-25 10:49:24

Google Scopes for OAuth - which one to choose?

As you know, Google has a lot of scope values ​​that could be chosen during authorization. But what if I only require user authentication, i.e. Not interested in accessing specific Google resources?

Right now I'm using the " www-opensocial.googleusercontent.com/api/people/ www.googleapis.com/auth/userinfo#email " binding to get information about the user (the second scope is needed to receive mail). Everything works, but when asking for confirmation, the user is given a message that my application is trying to access Google Contacts. This can confuse users (how can I explain to them that I'm not going to get into contacts), so the question is, is it possible to use some other scope, without access to any critical resources?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question