Hide API tokens - Githubissues

Shopify / shipit-engine

Deployment coordination

https://shopify.engineering/introducing-shipit

MIT License

1.42k stars 144 forks source link

Hide API tokens #1298

Closed stephsachrajda closed 1 year ago

stephsachrajda commented 1 year ago

What

Small tweak to hide API tokens from the FE. Rather than bring in some fancy JS on the form, I just made it so that the token is only visible to the creator of the API client and only if it is less than 5 minutes old.

Why

Just a bit of a security enhancement.