New answers tagged access-token
1
vote
Can I sufficiently protect my REST Service using shared Tokens?
Yes, this is acceptable.
Some people think that using short-lived sessions is more secure than using a fixed API token on every request. I am not one of those people so I cannot explain why, but this ...
- 33.2k
1
vote
Is it safe to pass Google ID tokens to third-party services for user authentication?
This is not safe. The ID token that AwesomeApp sends to ScoreboardService is intended for AwesomeApp only (audience) and should not be accepted by ScoreboardService.
If ScoreBoardService accepts the ...
- 2,385
0
votes
Does a web access token need to be encoded?
base64.b64encode(os.urandom(30))
Please let me know if this is a good method of generating a random and safe token.
This would be suitably random for the purposes of preventing someone from guessing ...
- 468
3
votes
Accepted
Discord token got leaked?
No. From your description, they showed you the part of the token that is not private. It's the userID.
Token structure:
How to find someone's userID:
To find a user's ID on Discord, you can right-...
- 132k
Top 50 recent answers are included