Is there a way to *only* get a user's email address with Google's OAuth2 implementation?

前端 未结 2 478
悲哀的现实
悲哀的现实 2020-12-31 10:47

I have a \"Sign in with Google+\" button on my page. When people click on it, I want the only thing they authorize to be \"View your email address.\"

I

2条回答
  •  轮回少年
    2020-12-31 11:28

    Indeed, I've noticed that too. And I found an explanation from February 2013 here:

    This is an intentional change to more precisely communicate to users the set of permissions that is being granted. Through knowledge of the user's email address it is possible, via indirect means, to locate the user's profile address. In the interest of more accurate disclosure, thus, we are prompting users to approve such disclosure.

提交回复
热议问题