News for hackers. Stuff that matters.

A comment on The Vercel breach: OAuth attack exposes risk in platform environment variables. Parent comment

Re:The Vercel breach: OAuth attack exposes risk in platform ... by hvb2 on Tuesday April 21, 2026 @04:10PM (#47853902)
One time use of refresh tokens is really common? Where each refresh will get you a new access token AND a new refresh token?

That's standard in oidc I believe

[ Parent | on HN ]
Re:The Vercel breach: OAuth attack exposes risk in platform ... by mooreds on Tuesday April 21, 2026 @04:25PM (#47854098)
I don't have data on whether it is common, but I know a few OAuth vendors support it.
[ Parent | on HN ]