Platform Rotate Access Token
A 3-step recipe with JFrog. We can help you get access.
Recipe · 3 steps
Platform Rotate Access Token
with JFrog · Identity & Access Management
Create a new token, verify it, and revoke the old one.
- Create a replacement access token with the supplied scope and subject.
- Read the new token metadata back to confirm it was issued before revoking the old one.
- Revoke the superseded token so only the freshly issued credential remains valid.
What you'll need to have ready
- scope: The scope for the new token.
- subject: The subject for the new token.
- oldTokenId: The id of the token being rotated out and revoked.
For your developer
Arazzo workflow jfrog:rotate-access-token, 3 operations: createToken → getToken → revokeToken. Specs on APIs.io.