forked from mirrors/kingfisher
127 lines
3.3 KiB
YAML
127 lines
3.3 KiB
YAML
rules:
|
|
- name: Adobe Stock API Key
|
|
id: kingfisher.adobe.1
|
|
pattern: |
|
|
(?xi)
|
|
\b
|
|
adobe
|
|
(?:.|[\n\r]){0,16}?
|
|
(?:SECRET|PRIVATE|ACCESS|KEY|TOKEN)
|
|
(?:.|[\n\r]){0,32}?
|
|
\b
|
|
(
|
|
[A-F0-9]{32}
|
|
)
|
|
\b
|
|
pattern_requirements:
|
|
min_digits: 2
|
|
min_entropy: 3.5
|
|
examples:
|
|
- adobeKey = 1a2b3c4d5e6f7890abcdef1234567890
|
|
references:
|
|
- https://developer.adobe.com/stock/docs/getting-started/03-api-authentication/
|
|
validation:
|
|
type: Http
|
|
content:
|
|
request:
|
|
headers:
|
|
x-api-key: '{{ TOKEN }}'
|
|
x-product: '{{ PRODUCTID }}'
|
|
method: GET
|
|
response_matcher:
|
|
- report_response: true
|
|
- status:
|
|
- 200
|
|
type: StatusMatch
|
|
- type: WordMatch
|
|
words:
|
|
- '"error_code":"403003"'
|
|
negative: true
|
|
url: https://stock.adobe.io/Rest/Media/1/Search/Files?locale=en_US&search_parameters%5Bwords%5D=cats%20in%20costume
|
|
depends_on_rule:
|
|
- rule_id: "kingfisher.adobe.2"
|
|
variable: PRODUCTID
|
|
- name: Adobe IO Product ID
|
|
id: kingfisher.adobe.2
|
|
pattern: |
|
|
(?xi)
|
|
\b
|
|
adobe
|
|
(?:.|[\n\r]){0,64}?
|
|
\b
|
|
(
|
|
[a-z0-9]{12}
|
|
)
|
|
\b
|
|
min_entropy: 2.0
|
|
visible: false
|
|
examples:
|
|
- adobeProduct = lV9ASPsd2P3d
|
|
- name: Adobe OAuth Client Secret
|
|
id: kingfisher.adobe.3
|
|
pattern: |
|
|
(?xi)
|
|
\b
|
|
(
|
|
p8e-[A-Z0-9-]{32}
|
|
)
|
|
(?:[^A-Z0-9-])
|
|
min_entropy: 3.5
|
|
examples:
|
|
- |
|
|
{
|
|
"adobe_client_credentials": {
|
|
"client_id": "a65b0146769d433a835f36660881db50",
|
|
"client_secret": "p8e-ibndcvsmAp9ZgPBZ606FSlYIZVlsZ-g5"
|
|
}
|
|
}
|
|
depends_on_rule:
|
|
- rule_id: "kingfisher.adobe.4"
|
|
variable: ADOBE_CLIENT_ID
|
|
validation:
|
|
type: Http
|
|
content:
|
|
request:
|
|
method: POST
|
|
url: https://ims-na1.adobelogin.com/ims/token/v3
|
|
headers:
|
|
Authorization: 'Basic {{ ADOBE_CLIENT_ID | append: ":" | append: TOKEN | b64enc }}'
|
|
Content-Type: application/x-www-form-urlencoded
|
|
Accept: application/json
|
|
body: 'code=invalid_code&grant_type=authorization_code'
|
|
response_matcher:
|
|
- report_response: true
|
|
- type: StatusMatch
|
|
status: [400]
|
|
- type: WordMatch
|
|
words:
|
|
- invalid_client
|
|
negative: true
|
|
# Revocation not added: Adobe documents revocation for access and refresh
|
|
# tokens, not for the OAuth client secret itself.
|
|
references:
|
|
- https://developer.adobe.com/developer-console/docs/guides/authentication/UserAuthentication/ims
|
|
|
|
- name: Adobe OAuth Client ID
|
|
id: kingfisher.adobe.4
|
|
pattern: |
|
|
(?xi)
|
|
\b
|
|
adobe
|
|
(?:.|[\n\r]){0,64}?
|
|
client_id
|
|
(?:.|[\n\r]){0,16}?
|
|
(
|
|
[a-f0-9]{32}
|
|
)
|
|
\b
|
|
min_entropy: 3.0
|
|
visible: false
|
|
examples:
|
|
- |
|
|
{
|
|
"adobe_client_credentials": {
|
|
"client_id": "a65b0146769d433a835f36660881db50",
|
|
"client_secret": "p8e-ibndcvsmAp9ZgPBZ606FSlYIZVlsZ-g5"
|
|
}
|
|
}
|