[
/changelog
·
v3.1.5
]
Penetration test fixes
Fixes from the September outside penetration test, and the 90-day key rotation.
version
v3.1.5
An outside team tested the API, the consent screen and the dashboard for two weeks in September. They found no critical issue and two medium ones, both fixed before this release.
Session links now expire after 15 minutes even if the user leaves the tab open, and dashboard sessions require a fresh sign-in after 12 hours.
Encryption keys for stored tokens now rotate every 90 days. Nothing changes on your side: tokens are re-encrypted in place.
[ try it in the sandbox ]
Node
Python
cURL
connect
import { Sluice } from ‘@sluice/node’;
const sluice = new Sluice(process.env.SLUICE_KEY);
const session = await sluice.connect.sessions.create({
user: ‘user_31c’,
scopes: [‘balances’, ‘transactions’],
});
// send session.url to your user
201 Created · 84 ms
id cs_7Hq2
url https://connect.sluice.dev/cs_7Hq2
expires_in 900
[
→
·
more releases
]
What else shipped.
Sluice® Template
$129 · one-time
NOVA STUDIO
/ SECURED BY POLAR