Skip to content

Commit baf882c

Browse files
Add security warning for access token exposure in Pyth Pro (#949)
* Add security warning callout for access token exposure in Pyth Pro subscribe page Co-Authored-By: [email protected] <[email protected]> * Update security warning to reference terms of service violation Co-Authored-By: [email protected] <[email protected]> --------- Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: [email protected] <[email protected]>
1 parent 412db2d commit baf882c

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

pages/price-feeds/pro/subscribe-price-updates.mdx

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,13 @@ Please fill out [this form](https://2fga8d.share-eu1.hsforms.com/2ftdPrASCTLCxtP
3232

3333
Use the access token to authenticate the websocket connection by passing it as an `Authorization{:bash}` header with the value `Bearer {token}{:bash}`.
3434

35+
<Callout type="warning" emoji="⚠️">
36+
**Security Warning**: Never expose your access token in frontend applications
37+
or client-side code. Access tokens should only be used in secure backend
38+
environments. Exposing tokens in frontend code makes them publicly accessible
39+
and is a violation of our terms of service.
40+
</Callout>
41+
3542
### 2. Configure subscription parameters
3643

3744
Pyth Pro supports several request/subscription parameters to customize the received prices.

0 commit comments

Comments
 (0)