Greasy Fork

New permissions to log in via GitHub?

I'm trying to sign in to my account via GitHub with a new browser profile, and it appears to be asking for new permissions:

Is this a deliberate change? If so, why are the new permissions (i.e. access to private profile details) needed?

This application will be able to read your private email addresses and read your private profile information.

Possibly related: https://greasyfork.org/en/forum/discussion/41040/sign-in-issue

Yes, this is a deliberate change in response to that discussion you reference.

The additional permission is user:email, which grants Greasy Fork access to know your email address, even if it is not public on your GitHub profile. Email is required for making an account on Greasy Fork.

The other permission it asks for is read:user. This permission was requested even before this recent change. I'm guessing that GitHub is just showing you all permissions (or perhaps all under the category "Personal user data"), not just the changes.

(I'm not sure that read:user is even required at this point, but all Greasy Fork wants from it is a user name.)

The additional permission is user:email, which grants Greasy Fork access to know your email address, even if it is not public on your GitHub profile. Email is required for making an account on Greasy Fork.

But I'm not trying to make an account, am I? I'm just trying to sign in. (I'm using my old profile to post this, which is still logged in.)

Presumably you have access to my email address already or I wouldn't have received this notification?

The same permissions are requested whether or not you're creating an account. It's just how this library (and possibly the entire protocol) works.