search

CocoaPods / trunk.cocoapods.org

The authentication server for CocoaPods push
MIT License
38 stars 17 forks source link

Invalidate Session Token #426

Closed uc-leo closed 1 year ago

uc-leo commented 1 year ago

After CircleCI security alert session tokens may have been exposed and I cannot find a way to invalidate them...

Can anybody help, please?

Thanks!

orta commented 1 year ago

We don't have a feature for this in the CLI + API. One strategy would be to create a new owner, move the pods over to them and then delete the old owner - the other would be to send a PR adding that feature to this repo for the API, and cocoapods/cocoapods-trunk for the CLI which would log out all the sessions for the current user.

uc-leo commented 1 year ago

all right @orta! thank you so much 👍