Use read-only github scope

2017-11-04 18:31:08 +01:00
parent a488b35e08
commit 70c9b13a9a
1 changed files with 1 additions and 1 deletions
@@ -29,7 +29,7 @@ const (
 func RedirectToLogin(w http.ResponseWriter, r *http.Request) {
 	urlStr := authorizeURL + "?" + url.Values{
 		"client_id": {config.Get().Github.ClientID},
-		"scope":     {"user"},
+		"scope":     {"read:user"},
 	}.Encode()
 	http.Redirect(w, r, urlStr, http.StatusTemporaryRedirect)
 }