Keys you can read again
The console is now somewhere you can work rather than a place you visit once to copy a key.
Secrets on demand
A client secret used to be shown once, at creation. Lose it and the only way back was to rotate. Now the Credentials page reveals the current secret whenever you need it.
- Sandbox secrets reveal straight away.
- Revealing a production secret asks you to sign in again if your last sign-in was more than fifteen minutes ago.
- Reveals are rate limited, and every one is recorded against your account.
Rotation works as before: the old secret stops working the moment the new one exists, so deploy first and rotate second.
Approval, stated plainly
Each application shows its status and what it means for each environment, instead of leaving you to infer it from a 403.
| Status | Sandbox | Production |
|---|---|---|
| Under review | Works | Refused |
| Approved | Works | Works |
| Sandbox only | Works | Refused |
| Suspended | Refused | Refused |
A review that does not enable production leaves sandbox working, so nothing you have built stops. See Environments and approval.
Also in this release
- Logo upload. The logo field takes a PNG, JPEG or WebP file instead of a URL, and Layout hosts it. It is shown beside the Layout mark when a person approves your application.
- New application ids look like
lyt_app_followed by 24 hex characters. - Faster navigation. Moving between console pages swaps only the page, so the sidebar and your application list stay put.
- Welcome email arrives once onboarding is actually complete, not at sign-up.
Breaking changes
None. If you validate application ids against a pattern, accept the lyt_app_ form, or better, treat ids as opaque strings.