Skip to content

Shorten the time period for tracking a PAT's last_used value

Currently the Last Used value for personal access tokens is only updated every 24 hours.

To improve security, the last value should be updated more frequently. Currently, with the 24 hour update interval, you lose insight on the use of a compromised token.

Proposed Solution

Update last used for personal access tokens on as small of an interval as possible without causing performance concerns.

Edited by Hannah Sutor