Company
Date Published
Author
Philip Fulcher
Word count
780
Language
English
Hacker News points
None

Summary

Nx Cloud has introduced personal access tokens, enhancing control over access to cached artifacts and addressing previous challenges with workspace-level access tokens. This update, responding to requests from enterprise customers, allows individual users to be authenticated for cache access, easing the process of revoking access when a user leaves an organization. The transition from workspace-level "access tokens" to "CI access tokens," now set as environment variables, prevents potential security risks associated with committing tokens to code repositories. Personal access tokens ensure that user access aligns with existing de-provisioning processes, particularly benefiting teams integrated with GitHub, as access is automatically revoked when a user's GitHub access is removed. Open-source teams can also manage cache access effectively by configuring read/write permissions for core contributors while offering read-only access to anonymous users. With the new system, enabling personal access tokens requires converting existing workspaces to use the nxCloudId, generating personal access tokens for contributors, and updating CI access tokens to be set as environment variables, thereby improving both security and flexibility.