From 19d69e965f87f7a8f837dec383b335daca7e9e32 Mon Sep 17 00:00:00 2001 From: Colin Maudry Date: Wed, 13 May 2026 12:29:41 +0200 Subject: [PATCH] =?UTF-8?q?Format=20pr=C3=A9fixe=20token=20#78?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/superpowers/specs/2026-05-13-api-privee-design.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/superpowers/specs/2026-05-13-api-privee-design.md b/docs/superpowers/specs/2026-05-13-api-privee-design.md index 0a838c3..151f170 100644 --- a/docs/superpowers/specs/2026-05-13-api-privee-design.md +++ b/docs/superpowers/specs/2026-05-13-api-privee-design.md @@ -252,14 +252,14 @@ Pas de CSV / Parquet. Ajout possible plus tard via `?format=`. Header HTTP standard : ``` -Authorization: Bearer dcpinfo_a1b2c3d4... +Authorization: Bearer decpinfo_a1b2c3d4... ``` Pas de support via query string (fuites dans les logs). ### 6.2 Format du token -Préfixe `dcpinfo_` + 32 octets aléatoires hex (43 caractères au total). +Préfixe `decpinfo_` + 32 octets aléatoires hex (43 caractères au total). Le préfixe facilite la détection de fuites (gitleaks, etc.). ### 6.3 Hashing