Commit 4ea4f61b authored by Neil McGovern's avatar Neil McGovern Committed by Debarshi Ray

google: Only request the email field when getting the user's identity

Currently, a lot of personal information was being received, including
gender and profile picture. The email is the only thing that's really
used, for the account's identity and presentation identy, and the rest
was being simply thrown away. Therefore, avoid receiving them in the
first place.

Verified via the Google APIs Explorer and the Google OAuth 2.0
Playground:
https://developers.google.com/apis-explorer/#p/oauth2/v2/oauth2.userinfo.get
https://developers.google.com/oauthplayground/

https://gitlab.gnome.org/GNOME/gnome-online-accounts/merge_requests/19
parent b8a6f2a8
......@@ -172,6 +172,7 @@ get_identity_sync (GoaOAuth2Provider *oauth2_provider,
call = rest_proxy_new_call (proxy);
rest_proxy_call_set_method (call, "GET");
rest_proxy_call_add_param (call, "access_token", access_token);
rest_proxy_call_add_param (call, "fields", "email");
if (!rest_proxy_call_sync (call, error))
goto out;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment