Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change the format of access tokens #893

Open
trustin opened this issue Nov 13, 2023 · 0 comments
Open

Change the format of access tokens #893

trustin opened this issue Nov 13, 2023 · 0 comments

Comments

@trustin
Copy link
Member

trustin commented Nov 13, 2023

Our access tokens always start with appToken-. appToken is a generic term that doesn't tell what service the token belongs to. It'd be better for security scanning if it starts with the prefix that explicitly signifies it's for Central Dogma. For example, we could make our tokens start with dogma? We could do some research on the format of popular services' access tokens, such as GitHub.

Other changes we might want to introduce as well:

  • Use _ instead of -
  • More entrophy
  • Backward compatibility (i.e. allow using the old tokens)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant