Consent page and permissions
Why the consent page appears, what each permission actually means, what happens if you allow only part of it, and when consent takes effect.
Why the consent page appears
When you tap "Sign in with MuoCeon" in some application, that application sends you to MuoCeon's consent page. The page states which application it is and what it wants to read. Only after you tap "Allow" can the application access that information.
What each permission actually means
| What the page says | What it actually means |
|---|---|
| Verify your identity | The app can confirm "you are you" and receives a stable user identifier |
| Read your basic profile | The app can read your nickname and display name |
| Read your email address | The app can read your email and whether it is verified |
| Continue accessing while you are away | The app can access the authorized data even when you are not using it, until you revoke access |
The last one matters most. If you only use an application occasionally, you can safely refuse — the app will not gain long-term access, but usually still works during that session.
Can I allow only part of it
It depends on how the application asked. The page lists all scopes that application requested, and the decision is submitted as a whole: allow or refuse. To narrow it, you would have to refuse and let the application start a smaller request (most applications do not).
When does consent take effect
Immediately: once the application has its grant, it can read what you allowed. Grants are kept per client and per device, so signing in to the same application on another device may ask again.
Related
- Revoking access and token invalidation: Revoking access
- The protocol definition of scopes: Scopes and audiences
Authorization and permissions
Authorization questions between you and an application — what the consent page asks, what happens if you allow only part of it, what revoking does, and why a token cannot read some resource.
Revoking access
Where to revoke access, what happens to the application afterwards, why an application keeps asking for authorization, and how revocation differs from signing out.