S
S
Sergey Shilovsky2019-06-02 22:40:00
API
Sergey Shilovsky, 2019-06-02 22:40:00

Why is it possible to create github authorization without oauthApp, but not reset/update?

Using POST /authorizations with a body and BasicAuth, you can get a token and use it successfully. But only those registered on the OAuthApp github have the opportunity to get a new token for an existing authorization. As a result, the simplest crutch is to generate a note, thereby creating a new authorization every user login. Question 1: Why give the opportunity to create a new authorization through Basic, but not give the opportunity to update the authorization through the same Basic? Question 2: If github moves everyone to oauth, then why leave the documentation for creating authorization through Basic?
{ "note": "myApp" }

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Anton Shamanov, 2019-06-03
@First_Spectr

but do not give the opportunity to update the authorization through the same Basic?

Is such a possibility mentioned in rfc7617?
well, at least because of backward compatibility with legacy code

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question