{"action":"created","issue":{"url":"https://api.github.com/repos/mapillary/mapillary_issues/issues/2863","repository_url":"https://api.github.com/repos/mapillary/mapillary_issues","labels_url":"https://api.github.com/repos/mapillary/mapillary_issues/issues/2863/labels{/name}","comments_url":"https://api.github.com/repos/mapillary/mapillary_issues/issues/2863/comments","events_url":"https://api.github.com/repos/mapillary/mapillary_issues/issues/2863/events","html_url":"https://github.com/mapillary/mapillary_issues/issues/2863","id":295755389,"number":2863,"title":"OAuth authorization page always mentions \"uploader\" app","user":{"login":"nicolas17","id":101955,"avatar_url":"https://avatars3.githubusercontent.com/u/101955?v=4","gravatar_id":"","url":"https://api.github.com/users/nicolas17","html_url":"https://github.com/nicolas17","followers_url":"https://api.github.com/users/nicolas17/followers","following_url":"https://api.github.com/users/nicolas17/following{/other_user}","gists_url":"https://api.github.com/users/nicolas17/gists{/gist_id}","starred_url":"https://api.github.com/users/nicolas17/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nicolas17/subscriptions","organizations_url":"https://api.github.com/users/nicolas17/orgs","repos_url":"https://api.github.com/users/nicolas17/repos","events_url":"https://api.github.com/users/nicolas17/events{/privacy}","received_events_url":"https://api.github.com/users/nicolas17/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-09T04:59:40Z","updated_at":"2018-02-09T16:19:54Z","closed_at":null,"author_association":"NONE","body":"The OAuth authorization page at https://www.mapillary.com/connect seems to have hardcoded text saying \"The uploader will be able to read your email and write to the database on your behalf\".\r\n\r\nThis appears for any registered OAuth app, even the official JOSM plugin(!). It says \"uploader\" even if the app is not an uploader, and it says \"will be able to read your email and write to the database\" even if those aren't the OAuth scopes being requested. For example, JOSM is *not* asking to get access to my email address (`user:email` scope).\r\n\r\nI guess that text was added for the desktop uploader app (which I don't remember being ever released 🤔). If the plan was to show something more user-friendly than \"the app [name] is requesting the following permissions: [ugly bullet list]\", that sounds like a good idea but it should be done only for the uploader app's client_id."},"comment":{"url":"https://api.github.com/repos/mapillary/mapillary_issues/issues/comments/364480902","html_url":"https://github.com/mapillary/mapillary_issues/issues/2863#issuecomment-364480902","issue_url":"https://api.github.com/repos/mapillary/mapillary_issues/issues/2863","id":364480902,"user":{"login":"katrinhumal","id":16334352,"avatar_url":"https://avatars2.githubusercontent.com/u/16334352?v=4","gravatar_id":"","url":"https://api.github.com/users/katrinhumal","html_url":"https://github.com/katrinhumal","followers_url":"https://api.github.com/users/katrinhumal/followers","following_url":"https://api.github.com/users/katrinhumal/following{/other_user}","gists_url":"https://api.github.com/users/katrinhumal/gists{/gist_id}","starred_url":"https://api.github.com/users/katrinhumal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/katrinhumal/subscriptions","organizations_url":"https://api.github.com/users/katrinhumal/orgs","repos_url":"https://api.github.com/users/katrinhumal/repos","events_url":"https://api.github.com/users/katrinhumal/events{/privacy}","received_events_url":"https://api.github.com/users/katrinhumal/received_events","type":"User","site_admin":false},"created_at":"2018-02-09T16:19:54Z","updated_at":"2018-02-09T16:19:54Z","author_association":"NONE","body":"@nicolas17 well-spotted! We actually just realised this ourselves as well and will improve the wording to be more accurate and truthful. :)"}}
{"actor":{"display_login":"katrinhumal"}}