Skip to content

Commit

Permalink
Link to #78
Browse files Browse the repository at this point in the history
  • Loading branch information
michielbdejong authored Jan 23, 2025
1 parent dd1b701 commit 82d1ba8
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ or [for Pivot as piece of config+software](https://matrix.to/#/#solid_pivot:matr
## Warning
When a pod owner authenticates to a Solid app, this app gets full access to that user's data, on their own pod and elsewhere. This is not how we envision Solid's trinity of WebId's, Pods, and Solid apps, but it's what we have implemented so far. This is a problem that is not specific to Pivot, but that is shared among all WAC-based implementations of Solid.

See [this issue]() for a discussion of how we might fix this situation.
See [this issue](https://github.com/solid-contrib/pivot/issues/78) for a discussion of how we might fix this situation.
In the meantime, we [warn the user](https://github.com/solid-contrib/pivot/pull/38) (in a much sterner way than most other WAC-based servers do) that in the Solid-OIDC flow they are not just sharing their identity with a Solid app, but are actually allowing that app to read and write any data on their behalf. Still, we are aware that the current situation is insecure.

## Example usage
Expand Down

0 comments on commit 82d1ba8

Please sign in to comment.