3

I just created a GitLab application to connect it with StackEdit.io. I had to create the GitLab application with api scope and I had to uncheck confidential due to 1 and 2. I'm not very familiar with OAuth and was wondering about the privacy risks.

api Grants complete read/write access to the API, including all groups and projects, the container registry, and the package registry.

confidential The application will be used where the client secrets can be kept confidential. Native mobile apps and single-page applications are considered non-confidential.

2
  • 1
    Are you asking because it was not well received on Stack Overflow? It even has a GitLab "collective". Nov 18 at 14:01
  • @P.Mort.-forgotClayShirky_q thanks. I have only asked here. I will ask in InfoSec because I'm most interested in the privacy side of it.
    – joseville
    Nov 18 at 16:16
7

GitLab is a web application and we have a Web Applications site. It even has a tag.

For questions about GitLab - a repository manager which lets teams collaborate on code.

There's also an Information Security site if your questions are specifically about security. That site has an tag.

OAuth is an open standard for authorizing access to data. It is a service that is complementary to, but distinct from, OpenID.

As always check the site's help centres (https://webapps.stackexchange.com/help and https://security.stackexchange.com/help) and maybe look at the existing questions in those tags to see if your question is a good fit.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .