Restrict Google OAuth to youtube.force-ssl and document zero Google data sharing.

Addresses Google OAuth verification feedback on scopes and privacy disclosure.
2026-07-22 18:35:54 +02:00
parent 00dbc132ed
commit bcca0a6e6f
2 changed files with 11 additions and 3 deletions
@@ -19,9 +19,7 @@ export const authOptions: NextAuthOptions = {
            "openid",
            "email",
            "profile",
-            "https://www.googleapis.com/auth/youtube.upload",
-            "https://www.googleapis.com/auth/youtube.readonly",
-            // Required to add uploaded videos to playlists
+            // Single YouTube Data API scope (covers upload, channel, and playlist APIs)
            "https://www.googleapis.com/auth/youtube.force-ssl",
          ].join(" "),
        },