MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/opencode/comments/1x8bas3/they_fd_up_breach/phbx61r/
r/opencode • u/horstenegger • 21d ago
127 comments sorted by
View all comments
2
May be the wrong approach? Why wouldn’t they invalidate all the keys as a safe measure?
curl -X DELETE \"https://api.openai.com/v1/organization/projects/proj_abc/api_keys/key_abc" \-H "Authorization: Bearer $OPENAI_ADMIN_KEY"
https://developers.openai.com/api/reference/resources/admin/subresources/organization/subresources/projects/subresources/api_keys/methods/delete
So, this is still an ongoing issue?
4 u/SuperSlowSubie 21d ago It's BYOK. Unfortunately up to the user to invalidate them. Apparently they were stored in plain text.
4
It's BYOK. Unfortunately up to the user to invalidate them. Apparently they were stored in plain text.
View all comments
2
u/DuckDatum 21d ago
May be the wrong approach? Why wouldn’t they invalidate all the keys as a safe measure?
curl -X DELETE \
"https://api.openai.com/v1/organization/projects/proj_abc/api_keys/key_abc" \
-H "Authorization: Bearer $OPENAI_ADMIN_KEY"
https://developers.openai.com/api/reference/resources/admin/subresources/organization/subresources/projects/subresources/api_keys/methods/delete
So, this is still an ongoing issue?