Tampermonkey ruma Jan Biniok

4.7 Stars out of 5

Review by nexxer

Solid replacement to Greasemonkey with some added features and an updated UI.

I am concerned that on update, it tries to take me to https://tampermonkey.net after a Google OAuth login. I'm unsure why it would need that.

Tzolin rutzij b'anonel

xtalüx rutzijol 7 jierren lyn

Google Oauth is done via client-side authentication, which needs a redirect URI to pass the access token on success. The token is part of the URL's hash component which is _not_ transferred to the server. In normal Tampermonkey should close the tab after it extracted the access token from the tab's URL.

https://developers.google.com/identity/protocols/OAuth2UserAgent#handlingresponse