Shulou(Shulou.com)11/24 Report--

Thank CTOnews.com netizens for not screaming clues delivery! CTOnews.com, December 20 (Xinhua)-- GitHub has reached a partnership with Tencent Wechat to help protect common users of all public and private warehouses by scanning access tokens, according to the official blog of Microsoft GitHub.

GitHub key scanning protects users by searching for known types of keys in the repository. By identifying and marking these keys, you can help prevent data disclosure and fraud.

Tencent Wechat tokens allow users to verify Wechat official accounts and Mini Program developers, obtain sensitive information about business applications, and can be used to verify the identity of merchants.

CTOnews.com learned that specifically, GitHub will forward the access tokens found in the public warehouse to Wechat, and Wechat will notify the affected users. Wechat encourages users to delete leaked API token on GitHub and create a new token on WeChat Pay merchant platform or Wechat official account platform.

WeChat Pay's keys include:

APIv2 key, used for all interfaces of APIv2.

The private key corresponding to the merchant's API certificate, which is used for the high security level interface of APIv2 and all interfaces of APIv3.

APIv3 key, WeChat Pay platform certificate download API for APIv3 and callback notification.

If the above key is leaked in GitHub, emergency handling can be performed according to the document in the link.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.