Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-26955

API token can be extracted from config page after save

XMLWordPrintable

      Hi everyone,

      I've noticed that after I save API token at settings page, I can access the token under asterisk using browser's developer console. This is very insecure, token can be seen by anyone who has access to settings. I suspect GitHub shows token only once due to security risks as well.

          [JENKINS-26955] API token can be extracted from config page after save

          Dmitry P created issue -
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 161142 ] New: JNJira + In-Review [ 180584 ]
          Honza Brázdil made changes -
          Assignee Original: Honza Brázdil [ janinko ]

            Unassigned Unassigned
            lunaticare Dmitry P
            Votes:
            1 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: