Hey, so I’m trying to check out the mobile app for Discourse, and I’ve ran into a few issues already.
First off, it’s impossible to sign up through the mobile app, or at least, for me, it was not intuitive at all. I tried linking my Github account, which “worked” but didn’t take me to any sort of sign up page. So I had to do it on desktop.
And now, after successfully signing up, it says this:
Authorize application access
Sorry, you do not have the required trust level to access the user API
What do I have to do to get rid of that?
There’s a setting which you may want to adjust:
If it’s not set to zero, new users won’t be able to use the Discourse mobile app.
To me this seems a usability oversight, and I quickly changed the setting to zero when I realised what was happening to our new users.
However, I’m sure there’s a rationale for the default setting being non-zero.
@codinghorror you ok with me bumping the default to 0
What are the security implications for all new users to be able to get API keys?
very low risk, protocol for getting a key requires web access. If you can script that you can script a user anyway using cookies
If you think it is safe then I am OK with it.