Unverified50% confidenceSolutionExact time
The principle of least privilege includes: limiting token scope (read-only or restricted to a single repository), setting expiration times, preferring OAuth and app-specific passwords over master passwords, and keeping 2FA and payments in human hands.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAccount authorization on mainstream platforms is typically based on the OAuth protocol; in theory, third parties only obtain a limited-permission token and do not directly obtain the password.71% similarUnverifiedInput contracts should strictly limit information flow, allowing only necessary content to be passed in; passwords, payment details, and irrelevant files should not enter the model's input.69% similarUnverifiedEach time an identity is passed downstream, the scope defined during token exchange should restrict rather than expand permissions, following the principle of least privilege.64% similarUnverifiedOAuth access tokens are not affected by password changes and typically do not trigger traditional security alerts.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1052397API
curl https://kongchang.com/api/v1/knowledge/claims/1052397MCP
get_claim(id=1052397)