Canvas API access revoked for students after security incident ... anyone else?
Hey folks, after the Canvas security incident my personal access token got revoked and the "New Access Token" button on canvas.ubc.ca/profile/settings is now disabled with a message saying admins have to generate tokens on my behalf.
I'd been using my token for a personal productivity tool that pulls assignments, grades, syllabuses, files and announcements into a unified dashboard - built it during finals to keep track of multiple courses without a million browser tabs open. UBC has historically promoted API access for exactly this kind of student-built tooling (there are docs on it, and faculty have suggested it in past CS courses). So its weird now they totally revoked people from using it?
Considering how more and more popular agentic work has become and how mainstream it seems to be to have claude instances running 24/7 ... why remove it? Its not like a student hacked canvas lol