Feature request (security)
Onedrive API supports limited “scopes” for the access tokens. It seems the current token has onedrive.readwrite
access scope that grants duplicacy
R/W access to all Onedrive files. If the Onedrive token could be limited to “App folder” only (onedrive.appfolder
scope), then duplicacy
would have access to only e.g. Apps\Duplicacy
only.
This would be a great improvement from security point of view. Folks have their important data on Onedrive and the current token gives access to all of the data.