Tokens are a risk to display on an unprotected system (#765)

GoogleCloudPlatform · Jul 22, 2017 · fd0ef5c · fd0ef5c
1 parent 33210e3
commit fd0ef5c
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/appengine-java8/gaeinfo/src/main/java/com/example/appengine/standard/GaeInfoServlet.java b/appengine-java8/gaeinfo/src/main/java/com/example/appengine/standard/GaeInfoServlet.java
@@ -53,14 +53,16 @@ public class GaeInfoServlet extends HttpServlet {
       "/computeMetadata/v1/instance/service-accounts/default/aliases",
       "/computeMetadata/v1/instance/service-accounts/default/",
       "/computeMetadata/v1/instance/service-accounts/default/scopes",
-      "/computeMetadata/v1/instance/service-accounts/default/token",
+// Tokens work - but are a security risk to display
+//      "/computeMetadata/v1/instance/service-accounts/default/token"
   };
 
   final String[] v1Acct = {
       "/computeMetadata/v1/instance/service-accounts/{account}/aliases",
       "/computeMetadata/v1/instance/service-accounts/{account}/email",
       "/computeMetadata/v1/instance/service-accounts/{account}/scopes",
-      "/computeMetadata/v1/instance/service-accounts/{account}/token"
+// Tokens work - but are a security risk to display
+//     "/computeMetadata/v1/instance/service-accounts/{account}/token"
   };
 
   final String metadata = "http://metadata.google.internal";