New
Improvement
Fix
This release introduces a big improvement in Rollbar - enhanced security with the enablement of encrypted access tokens. From now on, newly created tokens are encrypted and can no longer be viewed through the UI or API after they are created. Users must copy and store their tokens securely upon generation, and tokens will only be identified by a new public ID, adding security and control to your Rollbar system. New tokens will also have flexible token lengths: 512 bits for maximum protection or 128 bits for compatibility with existing integrations, and a limited combined scopes rule to ensure private tokens aren’t shared publicly.
Note, this will not impact your current tokens, so no immediate action is needed. However, users can now encrypt their existing tokens for added security without affecting current functionality. We recommend encrypting your current tokens today. For more details, check out our blog or the Access Tokens documentation.
Also, we made some updates to our SDKs - pyrollbar v1.3.0 now supports Python 3.13, while removing support for Python 3.6. Rollbar-PHP v4.1.1 and Rollbar-PHP-Laravel v8.1.2 resolved a minor issue where TelemetryEvents could not handle a nested array as a $body argument. And following the end of life of Pivotal Tracker, we’ve removed Pivotal as a notification channel in Rollbar.
As always, we love your feedback. So reach out to us at product@rollbar.com and let us know what you think.
Key Changes:
- Improved Security: Newly created tokens are now encrypted and can no longer be viewed via the UI or API after creation. Users must copy and store their tokens securely upon generation.
- Optional Encryption for Existing Tokens: Users can now encrypt existing tokens for added security without affecting functionality.
- Flexible Token Lengths: New tokens can be 512-bit for maximum security or 128-bit for compatibility with existing integrations.
- Updated Scope Rules: The postserveritem and postclientitem scopes must now be issued separately, while read and write scopes can still be combined.