Skip to content

CC: Restrict API key auth for service-to-service #1639

New issue
New issue
Closed
Closed
CC: Restrict API key auth for service-to-service#1639
Assignees
glahayegitri-ms
Labels
sk team issueA tag to denote issues that where created by the Semantic Kernel team (i.e., not the community)

Description

@alliscode
Ben Thomas (alliscode)
opened on Jun 21, 2023

Exposing an API key in a browser client is not recommended.
Reference: Fix security issues in copilot chat app by DavidParks8 · Pull Request #1090 · microsoft/semantic-kernel (github.com)

Activity

  1. Adrian Bonar (adrianwyatt)
    added this to Apps & Services Semantic Kernelon May 30, 2023
  2. Ben Thomas (alliscode)
    converted this from a draft issue on Jun 21, 2023
  3. Ben Thomas (alliscode)
    added
    sk team issueA tag to denote issues that where created by the Semantic Kernel team (i.e., not the community)
    on Jun 21, 2023
  4. Ben Thomas (alliscode)
    moved this from Backlog – Copilot Dev UX to Ready in Apps & Services Semantic Kernelon Jun 21, 2023
  5. Ben Thomas (alliscode)
    assigned
    Gina Triolo (gitri-ms)
    on Jun 21, 2023
  6. Mads Bolaris (madsbolaris)
    added
    copilot chat
    copilot dev ux
    on Jun 27, 2023
  7. Gina Triolo (gitri-ms)
    moved this from Ready to Bugs in Apps & Services Semantic Kernelon Jul 11, 2023
  8. Gina Triolo (gitri-ms)
    moved this from Bugs to In progress in Apps & Services Semantic Kernelon Jul 11, 2023
  9. Gil LaHaye (glahaye)
    self-assigned this
    on Jul 27, 2023
  10. Gina Triolo (gitri-ms)
    linked a pull request that will close this issueSecurity: remove API key auth #92on Aug 7, 2023
  11. Gina Triolo (gitri-ms)
    removed a link to a pull requestSecurity: remove API key auth #92on Aug 8, 2023
  12. github-merge-queue
    added a commit that references this issue on Aug 18, 2023

    Chat Copilot Security Improvements (#126)

    2f9dbc5

  13. gitri-ms commented on Aug 21, 2023

    @gitri-ms
    Gina Triolo (gitri-ms)
    on Aug 21, 2023
    Contributor

    This has been fixed with microsoft/chat-copilot#126

  14. Gina Triolo (gitri-ms)
    closed this as completedon Aug 21, 2023
  15. github-project-automation
    moved this from In progress to Done in Apps & Services Semantic Kernelon Aug 21, 2023
  16. Kyle Beachem (kb0039)
    added a commit that references this issue on Jan 8, 2025

    Chat Copilot Security Improvements (microsoft#126)

    5087e1f
  17. Chuck B. (chuckbeasley)
    added a commit that references this issue on Mar 23, 2025

    Chat Copilot Security Improvements (microsoft#126)

    7841337
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

sk team issueA tag to denote issues that where created by the Semantic Kernel team (i.e., not the community)

Type

No type

Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions