Is there a way to disable the production token so ...
# ask-metafloww
wooden-dusk-90720
01/27/2023, 2:17 AMIs there a way to disable the production token so anyone can update my flow?
✅ 1
v
victorious-lawyer-58417
01/27/2023, 3:07 AMyeah, you can set a custom token with
create --new-token--new-token sharedsharedvictorious-lawyer-58417
01/27/2023, 3:07 AMthere's no way to disable it altogether
w
wooden-dusk-90720
01/27/2023, 3:07 AMcool, this is good enough
👍 1
wooden-dusk-90720
01/27/2023, 5:13 AMer.. it says
--new-token is not supported for @projects. Use --generate-new-token to create a new token.--generate-new-tokenv
victorious-lawyer-58417
01/27/2023, 5:43 AMah, if you are using
@projectw
wooden-dusk-90720
01/27/2023, 5:43 AMby the way, isn't the token visible in the Step Function details? so people can just look it up there?
v
victorious-lawyer-58417
01/27/2023, 5:46 AMyep, or you can look it up using the Client API. It’s not a security feature, just a safeguard to prevent fat-fingering
w
wooden-dusk-90720
02/15/2023, 2:52 AMDiscovered an easy way to bypass the token by overriding the USER variable to the original user 😂
v
victorious-lawyer-58417
02/15/2023, 2:56 AMthat works too - arguably a less elegant approach 🙂
5 Views