We want our app to just have read/write permission to the app folder for backing up some important data for our app users. We don't care to know personal information like username, email and location of the user but it seems like we cannot unselect the account_info.read permission forcing us to have access to personal information. Am I missing something?
Solved. While the dashboard does force the account_info.read permission, I was able to use the the scope parameter of the oauth2 authorization code flow to request the subset of permissions that we really need
Solved. While the dashboard does force the account_info.read permission, I was able to use the the scope parameter of the oauth2 authorization code flow to request the subset of permissions that we really need
Thanks for following up. I'm glad to hear you already sorted this out. Yes, that's correct, while the account_info.read scope is the default/required scope for user-linked app registrations, it is not technically required for authorizations. As you found, you do not need to request it when having users connect to your app; you can request a subset of scopes without it.
