Detach accounts; add confirmation page (Twitter); respect "revoke access"

[JeffSpies]

I have added the wrong twitter account to my gittip account because I was logged in with my organization's account.

I would like to have the correct account attached, but I recommend three features:

1. Detach account ability

2. Respond to "revoke access" on app side.

3. Include a confirmation page before connecting identities.

[chadwhitacre]

1. Detach account ability +1, that's implement account disconnect #639
2. Respond to "revoke access" on app side. Sounds good, though I'm not sure exactly what this means yet. Do we get a web hook or something?
3. Include a confirmation page before connecting identities. Did you not get the Twitter authorization page as part of the flow? Is that not enough?

[JeffSpies]

1. Great.

2. I thought maybe web hook; perhaps a ping on login to see if you're stil authorized and an update now button.

3. No. Same with Github. I was logged in, and there was nothing in-between "add account" and "account added".

[seanlinsley]

I'm assuming number 3 is out of date, because I definitely got a confirmation page on both GitHub and Twitter.

[chadwhitacre]

+1 from @nkavian via [email protected].

[nkavian]

I got the Twitter confirmation page but could not easily tell which twitter account I was automatically logged into and therefore linking..

[chadwhitacre]

These are either reticketed or should be.

[chadwhitacre]

Responding to oauth revocations is #823.

Confirming oauth reticketed as #1956.