API for determining Personal Access Token scopes? #24345
-
Is there a way to retrieve the current scopes for a Personal Access Token (PAT)? Use Case : As an organization owner, I want to know the scopes currently granted to a PAT for a member of my organization that has been leaked. Thanks, –Hal |
Beta Was this translation helpful? Give feedback.
Replies: 3 comments
-
Got the answer from Ivan support:
I’ve spent so much time staring at JSON that I forgot about the HTTP headers. /o\ Thanks, Ivan! |
Beta Was this translation helpful? Give feedback.
-
The issue is that if you change the scope of the API after creating it the headers do not update! |
Beta Was this translation helpful? Give feedback.
-
@yakov116 – if you’re seeing that behavior, that would be a separate bug that should be reported. I rarely change scopes, so have not encountered this. |
Beta Was this translation helpful? Give feedback.
Got the answer from Ivan support:
I’ve spent so much time staring at JSON that I forgot about the HTTP headers. /o\
Thanks, Ivan!