# Change history: Access Tokens

[← Changelog](/docs/changelog). Entries: 8.

- 2026-10-01 [BC-1001-13: Human approval for wider application access](/docs/changelog/2026-10-01#bc-1001-13-human-approval-for-wider-application-access)
- 2026-09-22 [BC-0922-9: Retrying an unfinished key rotation requires recovery](/docs/changelog/2026-09-22#bc-0922-9-retrying-an-unfinished-key-rotation-requires-recovery)
- 2026-09-18 [BC-0918-2: A server development-team member gets their own key, and the key block gains the collaborator slot](/docs/changelog/2026-09-18#bc-0918-2-a-server-development-team-member-gets-their-own-key-and-the-key-block-gains-the-collaborator-slot)
- 2026-08-10 [NEW-0810-1: issuing a share link is recorded in the account access journal](/docs/changelog/2026-08-10#new-0810-1-issuing-a-share-link-is-recorded-in-the-account-access-journal)
- 2026-08-05 [FIX-0805-3: key rotation no longer disconnects the server and app bound to it](/docs/changelog/2026-08-05#fix-0805-3-key-rotation-no-longer-disconnects-the-server-and-app-bound-to-it)
- 2026-07-31 [FIX-0731-5: an empty body with the JSON header is no longer rejected on the infrastructure routes](/docs/changelog/2026-07-31#fix-0731-5-an-empty-body-with-the-json-header-is-no-longer-rejected-on-the-infrastructure-routes)
- 2026-07-27 [FIX-0727-8: `ttlSeconds` bounds for access tokens in the machine-readable schema now match the behaviour](/docs/changelog/2026-07-27#fix-0727-8-ttlseconds-bounds-for-access-tokens-in-the-machine-readable-schema-now-match-the-behaviour)
- 2026-06-26 [NEW-0626-3: api-bearer token refresh and Gateway rejection reason](/docs/changelog/2026-06-26#new-0626-3-api-bearer-token-refresh-and-gateway-rejection-reason)