• Resolved jasonfb

    (@jasonfb)


    I have the Twitter login working successfully with my own Twitter app (Note you must apply to be a developer with them to get access to create apps)

    The log-in works fine HOWEVER, I am unhappy about the message that is presented to the user when they go to “Authorize App” —?it seems like the Twitter Login is requesting access to change account details, follow & unfollow, post and delete tweets on behalf of the user.

    None of this is something I want to do, I simply want the user to be able to Log IN to MY blog with their twitter account—?that’s all.

    It is not appropriate to be asking my visitors to give me access to their twitter accounts for a simple “Log in with Twitter” feature. Is it possible to limit the scope of the access to “Read only” As per the Twitter permissions API?

    I do not want the users to be presented with a list of ways they are giving me access to their twitter accounts— and I do not want to have this access either. (It does not create a trust experience between me and my users and it is not appropriate in today’s age to be asking for more permission/access than the app really needs.)

    Is it possible to change this or limit the scope to ‘read-only’ access ?

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Author miniOrange

    (@cyberlord92)

    Hi,

    The Twitter app uses the OAuth1 protocol which does not require any scope. These permissions asked while authorization is part of the protocol. It makes the user aware that the information is accessed by the app owner. We are retrieving information in a read-only format and used to create an account on your WordPress site. You will not get any access to the user’s Twitter accounts after allowing the permissions.

    If you have any further questions, please send us an email from the plug-in support form or email us at the email address provided on our website.

    Thanks.

Viewing 1 replies (of 1 total)
  • The topic ‘Is there a way to LIMIT the scope of the TWITTER LOGIN?’ is closed to new replies.