News for hackers. Stuff that matters.
Re:API Tokens: A Tedious Survey by teddyh on Wednesday August 25, 2021 @08:44AM (#28300909)
That wouldn’t be idempotent.

Also, you couldn’t send such a secret to, say, Gmail.

Re:API Tokens: A Tedious Survey by sudhirj on Thursday August 26, 2021 @01:24PM (#28317794)
It would be in that repeatedly hitting the URL will not have any effects, other than disabling them the first time.

But yeah, auto-link followers will invalidate them immediately. There's a case to be made for that being a good thing, but don't want to get into that.