Does the personal token DRONE_TOKEN ever get rotated?
If so, how frequently?
I know this question was asked before Personal token rotate? - Drone but I’m wondering if this has changed?
I’m running Drone server v2.9.1.
Tokens are not automatically rotated, however, you can manually rotate your token with the following API call
POST /api/user/token?rotate=true
Regarding your question about the rotation of the personal token DRONE_TOKEN in Drone server v2.9.1, as of my knowledge cutoff in September 2021, there is no automatic token rotation feature built into Drone. The DRONE_TOKEN is typically used as a static authentication token for accessing the Drone API.
However, it is important to note that token rotation is considered a security best practice. It is recommended to regularly rotate personal tokens, especially if there is any concern about the token’s security being compromised or if it has been accidentally exposed. Regularly rotating tokens helps minimize the risk of unauthorized access to your Drone server.
To ensure the most accurate and up-to-date information, I would recommend consulting the official Drone documentation or the Drone community to inquire about any changes or updates regarding token rotation in the version you are using.