You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Nov 1, 2022. It is now read-only.
Currently if you don't specify a SyncConfig, sync will be disabled and a sync scope won't be obtained during authentication.
However, for applications that are planning to include syncing in the future, or for applications that may enable/disable it based on some remote flags, that behaviour means that applications are forced to manually specify sync scope via applicationScopes escape hatch. Otherwise, users authenticated while sync was disabled will not have a sync scope, and will be asked to re-authenticate once sync becomes enabled.
This is a good example of an information leak, and an "unknown unknown".
SyncConfig could provide a flag to indicate that sync scope should be obtained regardless, while still allowing disabling syncing?
data-sync-user
changed the title
Handle the "not now, but maybe later" use case (in SyncConfig?)
FNX3-22367 ⁃ Handle the "not now, but maybe later" use case (in SyncConfig?)
Aug 1, 2020
data-sync-user
changed the title
FNX3-22367 ⁃ Handle the "not now, but maybe later" use case (in SyncConfig?)
FNX2-16763 ⁃ Handle the "not now, but maybe later" use case (in SyncConfig?)
Aug 2, 2020
st3fan
changed the title
FNX2-16763 ⁃ Handle the "not now, but maybe later" use case (in SyncConfig?)
Handle the "not now, but maybe later" use case (in SyncConfig?)
Aug 5, 2020
Follow-up to #3579
Currently if you don't specify a SyncConfig, sync will be disabled and a sync scope won't be obtained during authentication.
However, for applications that are planning to include syncing in the future, or for applications that may enable/disable it based on some remote flags, that behaviour means that applications are forced to manually specify sync scope via
applicationScopes
escape hatch. Otherwise, users authenticated while sync was disabled will not have a sync scope, and will be asked to re-authenticate once sync becomes enabled.This is a good example of an information leak, and an "unknown unknown".
SyncConfig could provide a flag to indicate that sync scope should be obtained regardless, while still allowing disabling syncing?
┆Issue is synchronized with this Jira Task
The text was updated successfully, but these errors were encountered: