Secure more apps with External Access Tokens and Private Publishing
Blog post from Replit
Replit introduces enhanced security features for app developers, extending Private Publishing and External Access Tokens to users on Core and Starter plans, previously limited to Pro and Enterprise plans. Private Publishing allows apps to be accessible only to specific users, making it suitable for personal tools, internal team apps, or early-stage prototypes. This feature operates at the network level to block unauthorized access, and now integrates with external services via External Access Tokens. These tokens enable secure interactions with webhooks, callbacks, and other services without exposing the app to the public internet. Users can generate tokens scoped to development or production environments, label them for identification, set expiration dates, and manage them under the Security section in the Publishing pane. Tokens can be used with HTTP headers or URL query parameters for authentication, and they can be revoked at any time to immediately terminate access. This development underscores Replit's commitment to providing a secure platform for coding and app development.