Allow toggling off OAuth organization access at consent screen #14386
Unanswered
kriswuollett
asked this question in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
The OAuth consent screen currently allows for requesting access to an organization if the organization has OAuth app access restrictions is enabled. However if restrictions are disabled at the organization level, the consent screen just shows a green checkmark implying that access will be granted. If I do not think it is a good idea for a particular app to work with one of my private organizations that in which I'm a member that IMO may be configured incorrectly, then I should be able to proactively protect it by denying OAuth access to the organization myself at the consent screen. There is no reason why I need to advertise what GitHub organizations I'm a member of to a GitHub app as long as data, like its membership lists, when I don't need that app's functionality for those particular organizations.
Beta Was this translation helpful? Give feedback.
All reactions