From 27b2764c28309d5d472ff7b985d8ff1b18de6ed7 Mon Sep 17 00:00:00 2001 From: Jeff Mitchell Date: Tue, 8 Aug 2017 21:10:15 -0400 Subject: [PATCH] Add an extra sentence to the github warning --- website/source/docs/auth/github.html.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/website/source/docs/auth/github.html.md b/website/source/docs/auth/github.html.md index e117a571add4..4277e6627744 100644 --- a/website/source/docs/auth/github.html.md +++ b/website/source/docs/auth/github.html.md @@ -22,7 +22,8 @@ scope can be used for authentication. If such a token is stolen from a third party service, and the attacker is able to make network calls to Vault, they will be able to log in as the user that generated the access token. When using this backend it is a good idea to ensure that access to Vault is restricted at -a network level rather than public. +a network level rather than public. If these risks are unacceptable to you, you +should use a different backend. ## Authentication