Scoped access support for Oauth Tokens

[sunjam]

As mentioned in your readme and the official documentation. Happy to re-file if this is not the proper repo. Cheers!

Nextcloud OAuth2 implementation currently does not support scoped access. This means that every token has full access to the complete account including read and write permission to the stored files. It is essential to store the OAuth2 tokens in a safe way!

Without scopes and restrictable access it is not recommended to use a Nextcloud instance as a user authentication service.

[bahuma20]

Hi sunjam, indeed this is the incorrect repo, as it has to be implemented in the Nextcloud Software itself.

So please file this issue against https://github.com/nextcloud/server.

[sunjam]

nextcloud/server#26233

…

On Sat, Mar 20, 2021 at 10:32 AM Max Bachhuber ***@***.***> wrote: Closed #2 <#2>. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#2 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AANUKZR4AFBFN5SYIOLDP7TTETLZFANCNFSM4ZQTDKVQ> .