When creating applications in Google Drive, there are a number of "scopes" that can be specified to tell users what permissions are required to run this application.
One of these permissions:
Perform these operations if I am not using the application.
Of great concern to our users. We could not find a final explanation of what causes this permission.
The only possibility we could think of is that using server-side stream for OAuth2 means that the server can still sync after closing the browser, and therefore this should be noted.
If this is the case, will using JS direct for the drive (without a proxy server) mean that this permission will not be requested?
David source
share