I have just noticed that my developer token (autogenerated in PlayFabEditorPrefsSO asset after successful login via the PlayFab editor extension) is present in my public git repository's history.
I have already inactivated the secret developer key available in my dashboard. However, how can I revoke this other one? because it seems to be different than my developer secret key
The developer token is the access token when you login as developer to the Editor extension, it is not the developer secret key. It should not be exposed. You may want to git ignore the relevant file. You can remove this token by logout the editor extension.
What does this token allow them to do, if someone did get a copy of it what permissions does it have on your PlayFab account? What operations can they perform on the PlayFab account if any?
Also, you said "logout to clear the token" but does that invalidate the token on the server or just clear it from the local file?
2 People are following this question.
