search

kartoza / prj.app

A django app for creating visual changelogs for software releases
30 stars 32 forks source link

Review Auth Processes #1364

Open zacharlie opened 3 years ago

zacharlie commented 3 years ago

Following on from the login issue reported in #1363, authentication processes should be reviewed to ensure they are compliant with current best practices

sumandari commented 2 years ago

Note: GitHub updated the API authentication tokens, providing additional security benefits.

To understand more about this change and why it's important, visit: https://github.blog/2021-04-05-behind-githubs-new-authentication-token-formats.

They encourage resetting other authentication tokens as well, or revoke any that are no longer needed. This applies to integrations (such as OAuth Apps and GitHub Apps) as well as personal access tokens. For more information on reviewing authorized integrations, refer to https://docs.github.com/github/authenticating-to-github/reviewing-your-authorized-integrations.