lucaswerkmeister-wmde@tools-sgebastion-10:~$ ls -l ~tools.cradle/oauth.ini -rw-r--r-- 1 tools.cradle tools.cradle 132 Jun 21 2020 /data/project/cradle/oauth.ini lucaswerkmeister-wmde@tools-sgebastion-10:~$ cat ~tools.cradle/oauth.ini [settings] agent = cradle consumerKey = 53acb74957ae0127da32a89d2f99bf02 consumerSecret = [REDACTED]
This consumer should be revoked immediately, since its credentials have been effectively public to all other Toolforge users for two years. Afterwards, @Magnus can make a private copy of the file (install -m600 oauth.ini oauth.ini.new), request and approve a new OAuth consumer, put its credentials in there, the overwrite the old file with the new one. (Don’t just chmod the old file – file permissions are checked when opening a file, not when reading from it, so chmod’ing an existing file doesn’t prevent users who already have an open file description for it from reading new information.)