Leak of client_id and client_secret

Reply

Leak of client_id and client_secret

sgt_000
Visitor

Hi folks!

What could a hacker do with client_id and client_secret?

Could the attacker benefit from this access?

1 Reply

kkhal
Music Fan

They would be able to create tokens as if they were you, and the usage would be attributed to you. The secret can be reset in the developer dashboard if you need to.

SUGGESTED POSTS