Welcome to the new Box Support website. Check out all the details here on what’s changed.

Revoke Developer Token deleted Webhook

New post

Comments

3 comments

  • Official comment
    Alex Novotny

    Hey Brandon, 

    This page talks about reasons webhooks could be deleted. We currently have a ticket already filed to beef up this page with further information on what causes webhook deletion. I will add the reason you identified to the ticket. I appreciate you bringing this to our attention. 

    Thanks, 

    Alex, Box Developer Advocate

    Comment actions Permalink
  • Brandon Etheredge

    Hi Alex,

    Thanks for the web page. It is totally non-intuitive that revoking a developer token would destroy the webhooks in the application. From a security perspective a user would go to the app, create a token, do some work, then revoke the token with no expectation that revoking the token would have negative side effects such as destroying resources.

    I would push for having that behavior fixed as a bug, or a notice in the Dev Console articulating this side effect. It caught us by surprise because all we were doing was using the token to find details out about the webhook under that application. If we hadn't recorded the endpoint it was calling our automation would be completely destroyed due to this bug and our vendor not providing us the details we were trying to discover.

    0
    Comment actions Permalink
  • Alex Novotny

    Thanks for that additional context. I agree. I will make sure this gets added to our documentation queue and communicated to the team in charge of the developer console. 

    0
    Comment actions Permalink

Please sign in to leave a comment.