#4230 API Key reminder sends the key in the clear via email
Closed: Fixed 2 years ago by pingou. Opened 2 years ago by bcl.

I received a reminder that an API key was due to expire. The email included the key in the clear. It shouldn't be sending keys via email, just the description and a link to the API page.

We should be able to fix this one easily by including only the first, say 5, characters of the API token.

Should be easy to fix :)

Metadata Update from @pingou:
- Issue tagged with: bug, easyfix

2 years ago

Metadata Update from @karsten:
- Issue assigned to karsten

2 years ago

Metadata Update from @pingou:
- Issue set to the milestone: 5.3

2 years ago

Login to comment on this ticket.

Related Pull Requests
  • #4239 Merged 2 years ago