In many cases, we will encounter certain applications that request users to grant a large number of permissions, although these permissions do not affect normal use, but
If too many permissions are granted to these applications, there is a risk of user information leakage. For this situation, Microsoft recently launched a command-line tool called Developer Proxy, which has been updated to the 0.9 preview version.
It is understood that this software can be used to test the behavior of software calling HTTP API, avoid ** ERP ** developers from requesting excessive permissions from users, and prevent software over-authorization problems.
And the Developer Proxy tool can capture a series of Microsoft Graph API requests issued by the application, and at the same time automatically detect the number of APIs that the application needs to call.
In addition, when the tool detects that the permissions owned by the application exceed the permissions actually required by the application, it will issue a relevant warning to the developer, and the developer can then adjust the software according to the actual situation.
The above is from the Internet, and the copyright belongs to the original work