While playing with Vikunja, the main thing that was missing for me, was a way to send notifications in another way than mail.
I wanted to create a script that checks a user’s notifications and then send a notification via my Gotify server.
I’m using OIDC authentication, so it’s not that easy (AFAIK) to authenticate in a scripted way. When looking around, I saw that API tokens are being added, currently already available in the unstable version.
This would be great for my use case! However, apparently the API token doesn’t allow someone to read his notifications.
Is there a specific reason to limit the API token to certain API routes?