Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-44722

API token text box should be a password field

    XMLWordPrintable

Details

    • Blue Ocean 1.2-beta1, Blue Ocean 1.2-beta2

    Description

      Problem
      The text box for the API token in the Pipeline creation wizard should be a password field, as the token is actually giving access to GH to anyone having it.

      Specially problematic in demos where anyone can see your screen.

      In scope

      • Ensure for Github, Github Enterprise that the token field is a password field

      Attachments

        Issue Links

          Activity

            jamesdumay James Dumay added a comment -

            cliffmeyers mind slipping this in with the GHE work?

            jamesdumay James Dumay added a comment - cliffmeyers mind slipping this in with the GHE work?
            cliffmeyers Cliff Meyers added a comment -

            amuniz thank you for catching this. This was a foolish mistake on my part. I've created a PR against master so we can get this merged ASAP.

            cliffmeyers Cliff Meyers added a comment - amuniz thank you for catching this. This was a foolish mistake on my part. I've created a PR against master so we can get this merged ASAP.

            People

              cliffmeyers Cliff Meyers
              amuniz Antonio Muñiz
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: