Title: Access token hardcoded inside the plugin code
Last modified: June 13, 2022

---

# Access token hardcoded inside the plugin code

 *  Resolved [Murali](https://wordpress.org/support/users/murali-indiacitys/)
 * (@murali-indiacitys)
 * [3 years, 11 months ago](https://wordpress.org/support/topic/access-token-hardcoded-inside-the-plugin-code/)
 * In this plugin, I found “SHIPROCKET_ACCESS_TOKEN” is hardcoded inside the plugin
   code and same access token is used by all users of this plugin. As per shiprocket
   api documentation, it says get access token after proper authentication using
   api user and this token will be used in for further api calls as authorization.
   In this plugin shiprocket access token is hardcoded inside the plugin file. why
   is it so?

Viewing 1 replies (of 1 total)

 *  Plugin Author [Shiprocket](https://wordpress.org/support/users/shiprocket/)
 * (@shiprocket)
 * [3 years, 10 months ago](https://wordpress.org/support/topic/access-token-hardcoded-inside-the-plugin-code/#post-15828047)
 * [@murali-indiacitys](https://wordpress.org/support/users/murali-indiacitys/) 
   Apologies for the inconvenience caused.
    We would like to inform you that the
   token for which you are talking about is the Vendor token code just to identify
   the request coming from the WooCommerce.
 * Hope this answer your query.
 * Thanks & Regards,
    Shiprocket

Viewing 1 replies (of 1 total)

The topic ‘Access token hardcoded inside the plugin code’ is closed to new replies.

 * ![](https://ps.w.org/shiprocket/assets/icon-256x256.png?rev=2086783)
 * [Shiprocket](https://wordpress.org/plugins/shiprocket/)
 * [Support Threads](https://wordpress.org/support/plugin/shiprocket/)
 * [Active Topics](https://wordpress.org/support/plugin/shiprocket/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/shiprocket/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/shiprocket/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [Shiprocket](https://wordpress.org/support/users/shiprocket/)
 * Last activity: [3 years, 10 months ago](https://wordpress.org/support/topic/access-token-hardcoded-inside-the-plugin-code/#post-15828047)
 * Status: resolved