Hi,
I noticed a tweet announcing the possibility using your Wikipedia account to edit OpenStreetMap. See the Wikipedia logo at https://www.openstreetmap.org/login . That's really nice!
After a bit of digging I found the registration at https://meta.wikimedia.org/w/index.php?title=Special:OAuthListConsumers/view... and looks like the consumer got one grant: "Applicable grants: User identity verification only with access to real name and email address via Special:OAuth/identify, no ability to read pages or act on a user's behalf."
So when used, the emailaddress of the user is shared with a third party. Is this in line with the privacy policy ( https://wikimediafoundation.org/wiki/Privacy_policy ) ? The user isn't warned beforehand, you realize it after granting the right and you get to some registration process with your emailaddress already pre-filled. Don't we want to warn the user what rights are being granted before approving? The current message is "In order to complete your request, OpenStreetMap needs permission to access information on all projects of this site on your behalf. No changes will be made with your account. "
Maarten
wikitech-l@lists.wikimedia.org