Home / Companies / Replit / Blog / Post Details
Content Deep Dive

Secure more apps with External Access Tokens and Private Publishing

Blog post from Replit

Post Details
Company
Date Published
Author
Replit
Word Count
427
Language
-
Hacker News Points
-
Summary

Replit introduces enhanced security features for app developers, extending Private Publishing and External Access Tokens to users on Core and Starter plans, previously limited to Pro and Enterprise plans. Private Publishing allows apps to be accessible only to specific users, making it suitable for personal tools, internal team apps, or early-stage prototypes. This feature operates at the network level to block unauthorized access, and now integrates with external services via External Access Tokens. These tokens enable secure interactions with webhooks, callbacks, and other services without exposing the app to the public internet. Users can generate tokens scoped to development or production environments, label them for identification, set expiration dates, and manage them under the Security section in the Publishing pane. Tokens can be used with HTTP headers or URL query parameters for authentication, and they can be revoked at any time to immediately terminate access. This development underscores Replit's commitment to providing a secure platform for coding and app development.