If cache = TRUE or cache = "some/path" (vs NA) in httr::oauth2.0_token(), a newly created .httr-oauth file is NOT in fact added to .gitignore and .Rbuildignore. This is contrary to the documentation and, I think?, behaviour at some point in the past.Update: I now think httr has always been this way.
The failure to .gitignore is the bigger problem and has lead to some googlesheets users committing and pushing tokens to GitHub (googlesheets sets cache = TRUE by default).
The text was updated successfully, but these errors were encountered:
#436 (#437)
* Fresh starts for oauth caching tests
* Test that new caches are ignored (failing)
* Ignore any newly created cache; fixes#436
* Streamline option setting/restoring in test
* Add NEWS bullet
r-lib#436 (r-lib#437)
* Fresh starts for oauth caching tests
* Test that new caches are ignored (failing)
* Ignore any newly created cache; fixesr-lib#436
* Streamline option setting/restoring in test
* Add NEWS bullet
If
cache = TRUEorcache = "some/path"(vsNA) inhttr::oauth2.0_token(), a newly created.httr-oauthfile is NOT in fact added to.gitignoreand.Rbuildignore. This is contrary to the documentationand, I think?, behaviour at some point in the past.Update: I now think httr has always been this way.The failure to
.gitignoreis the bigger problem and has lead to some googlesheets users committing and pushing tokens to GitHub (googlesheets setscache = TRUEby default).The text was updated successfully, but these errors were encountered: