backend
backend copied to clipboard
Login requests too much access into a student's personal Github account
Source academy requests too much access into a student's Github account, in particular, requesting read and write permissions to all repository data, including private repositories. This is unreasonable as a student's Github account might contain sensitive information (deploy keys, private repositories, etc), or a student's Github account is in a trusted position for important open source repositories (e.g., repository owner).
Source academy should be requesting only the permissions that it needs.