Hi,
Accroding to the discussion in this thread:
https://community.hubspot.com/t5/APIs-Integrations/How-to-reset-client-secret/m-p/271360/highlight/t…
it looks like we cannot rotate the client secret oursleves. And the Hubspot team can help do it. I had a couple of questions around this:
1. Security: Will the Hubspot team have visibilty on the new secret?
2. Security: How do i get access to the secret? Can i directly copy it from the app? Or do i get the secret from the Hubspot team? If the latter then will it be encrypted?
3. As the public app is in production, a lot of customers have already authenticated and we use the tokens to exchange data. After the rotation, will the tokens be invalidated?
Please let me know.
Thank you,
Anupam
Hi, @AKumar915 
Thanks for your question. I’d like to invite some of our community experts to the conversation — hey @nickdeckerdevs1 @zach_threadint @Phil_Vallender do you have any tips you can share with @AKumar915 and his team? – Jaycee
DMing the person is likely the best way to go.
that being said, I recently answered this question and went through a lot of stuff in regards to this on this post
https://community.hubspot.com/t5/APIs-Integrations/Help-on-Oauth2-Client-Secret-Rotation/td-p/1133322
Thank you @nickdeckerdevs1 for your insights. @Jaycee_Lewis I still need answers regarding the security questions i have. Can smeone from Hubspot answer those please? As Nick suggested, should I ping @IsaacTakushi directly?
Hi @Jaycee_Lewis @IsaacTakushi , looking forward to your response regarding the security questions I have:
1. Security: Will the Hubspot team have visibilty on the new secret?
2. Security: How do i get access to the secret? Can i directly copy it from the app? Or do i get the secret from the Hubspot team? If the latter then will it be encrypted?
Thank you,
Anupam
Hey, @AKumar915 Sending you a DM — Jaycee
