Will token get invalidated on password change?

[Got_V]

Hello,

I have a local user in Sonarqube which we created for an application team. We generated a token using this user and the team is using this token in their jobs. If I change the password of the user, will that token break?

[julienlancelot]

Hi,

As explained by Colin in this following thread, changing the password will not invalidate tokens.

Sonar token is not expiring on changing the password

Abhishek, Do you use other tools that revoke tokens when passwords change? IMO, one of the goals of tokens is that they can be individually revoked and when used for automations aren’t revoked just because of a password reset. Otherwise stated, a token is an alternative password, not just a alternative representation of a single password. That said, +1 on the idea of being able to set a token expiration date/time period. Colin

Regards

[Got_V]

Thanks so much Julien.