Thanks for raising this, folks! I’m escalating that to our dev and security teams for further analysis and threat modeling. I see your point, and I also observe a trend among various dev tooling vendors to increasingly time-constrain static credentials.
Log in to comment and vote
Comments2
Black Breeze
Jan 21
Thanks for raising this, folks! I’m escalating that to our dev and security teams for further analysis and threat modeling. I see your point, and I also observe a trend among various dev tooling vendors to increasingly time-constrain static credentials.
Apricot Gizmo
Jan 21
•Merged request
•2 votes
Add Expiry and Rotation Options to API Tokens
Tokens that never expire are a security weakness. Currently, admins can only manually recreate Tokens.
It would be nice if Token can be given an expiry date.