News for hackers. Stuff that matters.

A comment on Attack campaign involving stolen OAuth tokens issued to third-party integrators. Parent comment

Re:Attack campaign involving stolen OAuth tokens issued to t... by kall on Saturday April 16, 2022 @05:34AM (#31050993)
Aren't OAuth tokens scoped to org? Wouldn't it be easier to create an org per repo? I guess it might get expensive depending on your usage/collaborators.

Edit: nevermind OAuth tokens are not org-scoped, only apps are

[ Parent | on HN ]

There are no comments on this comment yet.