Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Delete API Key #673

Open
farisdurrani opened this issue Jan 17, 2024 · 0 comments
Open

Delete API Key #673

farisdurrani opened this issue Jan 17, 2024 · 0 comments

Comments

@farisdurrani
Copy link

farisdurrani commented Jan 17, 2024

Issue
Hi. As with any other secrets, they should be able to be changed or deleted to prevent security leakages. I don't see any function to delete an existing API key if that key has been leaked to the public.

In particular, I am commenting about the API key provided by api.congress.gov. A duplicate issue can be found on their GitHub page

Proposed solution 1
A simple way to resolve this is to create an input box taking in the API key given by the user. The backend will then query the database and delete the API key from usage so it can't be used anymore

Proposed solution 2
Another way is to have an expiration for each API key produced, either as a static value or a user-given value

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant