How to Rotate Your Tokens
Blog post from Rollbar
A recent data breach necessitated the expiration and regeneration of 'read' and 'write' scoped tokens to ensure data security. The process of token regeneration involves maintaining the same scopes, rate limits, and names while updating the access key and creation date, which is now included in the name column for easy identification of new tokens. Users can regenerate expired tokens either at the project level or the account level, with options available for regenerating all tokens or specific ones. A new user interface has been introduced to manage tokens, featuring color-coded statuses to indicate tokens that are "expiring soon," and providing bulk or individual regeneration options. Additionally, effective October 10th, 2023, all tokens with the "post_server_item" scope will expire, requiring users to manually update them using the new interface. After regenerating tokens, users should replace the old token keys in their application's codebase and verify functionality before expiring or deleting the old tokens, with detailed instructions and support available for users needing assistance.