Removing app does not revoke refresh token

フォローする

新規投稿

Maxime Beaudoin

• 2022年02月01日 18:20
• 編集済み

After removing a custom app from my user account, I can still use the refresh token and access everything. Essentially, removing an app does not revoke permissions. Why? This is a huge security concern.

0

• 

  Alex Novotny

  • 2022年02月02日 16:42

  Hi, 

  Can you send me the client id of that application or the enterprise id the app is tied to? It looks like the account that posted this question is not tied to an enterprise.

  Thanks, 

  Alex, Box Developer Advocate

  0

  コメントアクション Permalink

サインインしてコメントを残してください。