Authentication on Tokenisehttps://tokenise.rosvetic.com/tags/authentication/Recent content in Authentication on TokeniseHugoen-gbThu, 22 Oct 2026 11:06:00 +0000GitHub CLI can now hand out tokens that die within hours. Turn it on before your agent leaks onehttps://tokenise.rosvetic.com/posts/gh-cli-expiring-tokens-agents/Thu, 22 Oct 2026 11:06:00 +0000https://tokenise.rosvetic.com/posts/gh-cli-expiring-tokens-agents/<p>Every coding agent that can run <code>gh</code> can run <code>gh auth token</code>. That prints the OAuth token the CLI stored when you signed in, and until now that token stayed valid until somebody revoked it. A prompt-injected agent, a leaked transcript or a careless <code>env</code> dump would hand out a credential with no clock on it.</p>