Hello! Is there a way to revoke a user token creat...
# sdfd
dcrsmith
10/01/2021, 2:37 PMHello! Is there a way to revoke a user token created by the browser based authentication via script?
n
NickSuite
10/02/2021, 1:33 PMin WebStorm, there is an option to revoke the token.
p
Peter Ries
10/03/2021, 2:53 AMNot via script, no.
d
dcrsmith
10/03/2021, 3:03 AM🤨 when an employee leaves, we have to manually revoke for every account, that sucks.
s
stalbert
10/04/2021, 4:30 PMif that employee is deactivated they should have access any more.
stalbert
10/04/2021, 4:30 PMI haven't personally tested that - have you confirmed that tokens still work even if the associated employee no longer has access?
d
dcrsmith
10/04/2021, 4:32 PMCorrect. But for every customer a (partner) employee has access to you would have to enter every customer account to disable their access.
s
stalbert
10/04/2021, 4:36 PMassigning individuals to accounts that way is a poor security practice - even while the person is still working with the firm.
stalbert
10/04/2021, 4:36 PMas a workaround - in that scenario could you at least change their password upon exit?
d
dcrsmith
10/04/2021, 4:38 PMI agree. And we're not doing that but for SDF the devs can authenticate via browser to assign a token. Tokens don't care about password changes. I need a way to revoke those tokens easily.
s
stalbert
10/04/2021, 4:38 PMI think a better practice is to use a named account login(s) unique for each customer with a strong password that is managed by the firm.
d
dcrsmith
10/04/2021, 4:39 PMI don't disagree at all! Technically that's against NS terms though.
s
stalbert
10/04/2021, 4:39 PMaye, the plugin's browser support is better aligned with single-company use than the partner/many NS account scenario
✔️ 1
stalbert
10/04/2021, 4:41 PMInteresting - do you have a reference for those NS terms? It would be sad to think they are encouraging insecure practices or actively blocking more secure ones. Or is the violation you're thinking of more of a 'sharing a login' situation?