Allow bots to reset their own bot token

Follow

AlexejheroYTB

• May 25, 2019 09:09

Add an API feature which can be called to reset a bot's token and which returns the new token and invalidates the old one.

-15

• 

  MoonlightCapital

  • May 25, 2019 10:28

  This can be done by forcing 1000 login attempts in a day

  0

  Comment actions Permalink
• 

  HVENetworks

  • May 27, 2019 05:48

  Why would you need this? 

  0

  Comment actions Permalink
• 

  Detective Pika

  • May 27, 2019 13:09
  • Edited

  I can understand some very small situations where this could be useful but those very small situations are the result of the developer not being careful in the first place.
  
  Better solution! Protect your token! This just feels like a way to periodically generate new tokens for security but you shouldn't need to do that.

  0

  Comment actions Permalink
• 

  Donovan_DMC

  • June 01, 2019 06:19

  This would.. kill the session resetting the token, and would be incredibly insecure

  Say a token gets leaked and one person then uses this to reset it, main bot gets 401's now, and that old token is invalid, so they can freely make chaos while everyone just thinks the bot is dead, and while the bot is just getting spammed with 401 errors

  0

  Comment actions Permalink

Please sign in to leave a comment.