Private Mapbox tileset accessible despite token scope restrictions
Private Mapbox tileset accessibility after token exposure The goal is to confirm whether a private tileset remains protected when its access token is inadvertently published in a public repository, given that Mapbox tokens must be embedded in client‑side code for Mapbox GL JS or mobile SDKs. Constraints include the token’s scope (e.g., styles:tileset) and th