Thank you so much Heidi for the response! Just want to confirm before I go ahead to reset the developer token, will reset developer token affect the existing access token? Does users already authorized via OAuth needs to redo it again after the developer token reset?
Thanks! Xiaochuan On Thursday, December 1, 2022 at 5:41:39 PM UTC-8 adsapi wrote: > Hi Xiaochuan, > > Thank you for reaching out to us. > > > *What will be the risk if AdWords API Developer Token got leaked?* > > - Kindly note that developer token values are sensitive and should > never be asked for since an issued developer token > <https://developers.google.com/google-ads/api/docs/first-call/dev-token> > is a unique combination of letters, numbers, and characters *that is > required for communicating with the Google Ads API server*. It > *authorizes* your Google Ads API *activity* and thus you should treat > it like a *password*. > > > *If it is indeed risky, is it possible to rotate AdWords API Developer > Token? Any consequence to the existing OAuth access token? * > > - You should reset your developer token if you believe that it's been > compromised, or if a team member who has knowledge of the token has left. > That being said, I would suggest you just reset your developer token, you > may check this documentation > > <https://developers.google.com/google-ads/api/docs/best-practices/developer-token-reset> > > for more details. Note that a reset will *immediately invalidate* your > previous token, so any API requests using the old token will fail. > However, > a reset will *not* trigger a re-review and approval for the new > developer token. You can start using the new developer token immediately. > > Best regards, > [image: Google Logo] > Heidi > Google Ads API Team > > > ref:_00D1U1174p._5004Q2ghidE:ref > -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "Google Ads API and AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/bb0a5b0a-96cf-40a7-b913-b73072aa0ad1n%40googlegroups.com.
