DevOps Services : Azure

Whats the point of the app if i cant access my projects? Truly terrible

No user should create a personal access token with full permissions and hand it over to a third party developer. Users of this application essentially trust the developers of this app to do whatever they want with their own permissions. The developers could download the entirety of projects within the organization or even delete/modify them however they see fit. Login should rather go through OAuth consent, thus allowing tenant administrators to consent to their users using this application, e.g. after a background check of the company making this application. Furthermore lack of use of OAuth for sign in has me doubt the effectiveness of the developers; making me trust this app even less.

Please add open in Safari for all the Azure Certificate material. We could use reading mode or dark mode.