Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Token files aren't shared between Python and the other SDKs (access_exp vs accessExp)

Open
#30 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
55/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active

Research direction

Start with python/src/bitpin_sdk/token_store.py and compare its JSON serialization with the TypeScript, Go, and Java token stores; inspect Java’s reader for its handling of both key spellings. Update Python’s written keys and ensure every reader accepts both spellings for one release. Add a cross-language test that reads files written by each SDK; done means all four formats can be read without forcing reauthentication.

Written by the indexing model from the issue text.

Description

bug python security

FileTokenStore is meant to let bots in different languages on one host share tokens, so they stay under the authenticate limit of 3 requests per minute per IP. The JSON keys differ, though:

  • Python writes access_exp / refresh_exp (dataclasses.asdict(tokens) in python/src/bitpin_sdk/token_store.py).
  • TypeScript, Go and Java write accessExp / refreshExp.

The key id (PBKDF2) is the same everywhere, so every language finds the other's file. Python then fails to read a Go/TS/Java file and authenticates again, and Go and TS can't read a Python file. Java already reads both spellings.

Fix: pick accessExp (three of the four SDKs) and make Python write it. Every reader should accept both for one release, and a cross-language test should read a file written by each SDK.

Dominant language
Python
Stars
0
Forks
0
Avg merge
28m
Merged PRs (30d)
20

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from bitpin-dev/bitpin-sdk

All issues in bitpin-dev/bitpin-sdk

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.