DependencyTrack / DependencyTrack/dependency-track

API Token for the team should be visible once

Open
#3,777 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Hi,

Whenever user creates a team and the API Keys for third party integration, the API key should be visible (once right creation) and then it should be hidden. Since, teams can have multiple API keys associated with it, its better to shown them once to avoid exposure of it.

There is also no expiry to the API keys to make the best practice of rotating the API keys after duration of period.

### Proposed Behavior

Whenever user creates an API Key for team, following message should be shown so that way user will securely copy & store the keys.
OR
We can masked the API keys (After creation) so that it wont be visible.

Following message will appear after API key creation.

> Make sure to copy your API Keys now. You won’t be able to see it again!

Regarding Expiry for API keys, Each API Key must have an expiration date.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.