Page MenuHomePhabricator

Allow user to mark certain OAuth application as trusted (auto-authorized)
Closed, DuplicatePublic

Description

For example If you open a tool that uses OAuth (e.g. https://tabernacle.toolforge.org) and click "log in" link, the link will lead you to Special:OAuth/authorize which presented with a dialog that allow user to authorize an app.

Proposed: I can mark some specific OAuth apps as trusted, so when you click "log in" link the app will be automatically authorized without manual confirmation.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

See T91801: Support a more user friendly "re-authentication" flow for returning users and the discussion in T71232: Provide "authenticate" endpoint for regular users. I'd decline this; I think the problem is real but the differentiation between "trusted" and "normal" apps doesn't really make sense. We just shouldn't show the authorization dialog if the user has already previously authorized all the grants in that dialog.