Only request scopes which are used

izuzak · izuzak · commit 977e55cd86c0 · 2015-01-10T10:21:12.000+01:00
diff --git a/content/guides/getting-started.md b/content/guides/getting-started.md
@@ -196,8 +196,8 @@ Also, the [**Authorizations API**][authorizations api] makes it simple to use Ba
 to create an OAuth token. Try pasting and running the following command:
 
 <pre class="terminal">
-$ curl -i -u &lt;your_username&gt; -d '{"scopes": ["repo", "public_repo", "user", "gist"], \
-"note": "getting-started"}' https://api.github.com/authorizations
+$ curl -i -u &lt;your_username&gt; -d '{"scopes": ["repo", "user"], "note": "getting-started"}' \
+    https://api.github.com/authorizations
 
 HTTP/1.1 201 Created
 Location: https://api.github.com/authorizations/2
@@ -206,9 +206,7 @@ Content-Length: 384
 {
   "scopes": [
     "repo",
-    "public_repo",
-    "user",
-    "gist"
+    "user"
   ],
   "token": "5199831f4dd3b79e7c5b7e0ebe75d67aa66e79d4",
   "updated_at": "2012-11-14T14:04:24Z",
@@ -233,9 +231,9 @@ Next, let's look at the `scopes` we're sending over in this call. When creating
 a new token, we include an optional array of [_scopes_][scopes], or access
 levels, that indicate what information this token can access. In this case,
 we're setting up the token with _repo_ access, which grants access to read and
-write to private repositories, _public\_repo_ grants access to read and write to
- public repositories, _user_ grants access to read and write to all user data, and
-  _gist_ grants access to create new gists. See [the scopes docs][scopes] for a full list of
+write to public and private repositories, and _user_ scope, which grants read
+and write access to public and private user profile data. See
+[the scopes docs][scopes] for a full list of
 scopes. You should **only** request scopes that your application actually needs,
 in order to not frighten users with potentially invasive actions. The `201`
 status code tells us that the call was successful, and the JSON returned
@@ -248,8 +246,8 @@ in the [X-GitHub-OTP request header][2fa header]:
 
 <pre class="terminal">
 $ curl -i -u &lt;your_username&gt; -H "X-GitHub-OTP: &lt;your_2fa_OTP_code&gt;" \
-    -d '{"scopes": ["repo", "public_repo", "user", "gist"], \
-    "note": "getting-started"}' https://api.github.com/authorizations
+    -d '{"scopes": ["repo", "user"], "note": "getting-started"}' \
+    https://api.github.com/authorizations
 </pre>
 
 If you enabled 2FA with a mobile application, go ahead and get an OTP code from
