PeledYuval

What's your recommended way of implementing this in a simple App Server <> Postgres architecture? Is there a good Postgres plugin or do you utilize something on the App side?

Please, if I missed a method to revoke access - let me know how. I'm not being sarcastic, I think I've tried everything there is to try

I agree with you. I tried really hard to get this escalated. Tier 1 seem to have absolutely no ability to escalate tickets. It's a cost-saving decision for sure, and it feels really bad to fall between the cracks due to it

I don't remember the model, but it was a 4yr old Samsung LED TV

Thank you for the suggestion, I have already made sure that there are no App Passwords on my account

They're not a bad actor, I wouldn't be surprised if they have no idea they're even logged in. I actually just threw away my TV in the local drop off point. I thought it was broken beyond a point that was worth to repair but I'm guessing somebody more handy than me picked it up and DIYed it

I've done both of these things - to no avail! This is really weird

I think the risk of getting banned due to misuse is not worth it... But I like your hacker mentality!

This is a solution of last resort that I still don't want to go for

Thanks! This does sound ridiculous, but maybe it will work? Worth a shot

Thank you - I will be trying this

How do you imagine types would prevent this? No matter how I think about types in this context, I think a runtime check of "is this ID an app ID?" is mandatory in order to truly prevent this (alternatively- different URLs/parameter names to delete an app and a site)