Where do you put the default scope? about aspnet.security.oauth.providers HOT 5 CLOSED

This is still supported: simply add Scope.Add("user") in GitHubAuthenticationOptions.

That said, we generally limit the requested scope to the bare minimum needed for authentication, so not seeing this practice in the ASP.NET 5 middleware is not surprising 👍

from aspnet.security.oauth.providers.

Got it thanks!

from aspnet.security.oauth.providers.

Yeah, on the OWIN side I got a lot of flack from some users about being too aggressive with the scopes I requested. And they were right.

So please ensure you limit scopes to the bare minimum needed to get the basic user information so you can populate the correct claims for ASP.NET Identity

from aspnet.security.oauth.providers.

of course, I only asked because last I looked (and things could be different now) twitch.tv required a scope declaration even if it was the most basic scope in their tree.

from aspnet.security.oauth.providers.

👍

from aspnet.security.oauth.providers.