New OAuth App features: Multiple redirect URIs, wildcarding, and token expiration and refresh #204963
Replies: 5 comments 3 replies
This comment was marked as spam.
This comment was marked as spam.
This comment was marked as spam.
This comment was marked as spam.
This comment was marked as off-topic.
This comment was marked as off-topic.
|
@hpsin was this reverted? We no longer have the option to set wildcard matching. |
3 replies
|
204963 |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
🏷️ Discussion Type
Feature Announcement
💬 Feature/Topic Area
Apps
Body
We've shipped multiple updates to the OAuth and GitHub App platforms to help developers build more secure applications and handle more complex scenarios. See the changelog for more details.
What's new:
offline_accessscope, OAuth apps can now get a short lived (eight hours) token and a refresh token to use when the access token expires. Learn about the new tokens and scope in the docs.App developers should review their redirect URIs - if your app had only a single redirect URI registered, then it is and has been enabled for wildcard access since creation. If you do not require this wildcard access, you should disable it.
Please let us know your feedback, questions, or bug reports here. Thanks for building an app on GitHub!
All reactions