Post AYj45qsF0GjZvxPKAy by ludv@fosstodon.org
 (DIR) More posts by ludv@fosstodon.org
 (DIR) Post #AYhCrI7BwwpXLec2Ii by tilvids@mstdn.social
       2023-08-13T18:10:51Z
       
       0 likes, 0 repeats
       
       Why you should never use Facebook or Google to log in to third party websites - what to do instead 🧠 (video courtesy of @simon.caine Be sure to Like, Comment, & Subscribe for more great content!) 💙 https://tilvids.com/w/bJJVAJfsexQnWPpMU8s93H
       
 (DIR) Post #AYj45qsF0GjZvxPKAy by ludv@fosstodon.org
       2023-08-14T15:41:46Z
       
       0 likes, 0 repeats
       
       @tilvids OAuth2 DOES NOT hand out any user information to the Oauth endpoint (e.g. Facebook). The only information sent to the endpoint is an id of the website that the users is trying to sign up on. And the data being sent to the website (typically just your email) is specifically stated on authorization grant page where you first need to hit “Allow” before anything is sent!