forked from mirrors/kingfisher
54 lines
1.5 KiB
YAML
54 lines
1.5 KiB
YAML
rules:
|
|
- name: Huawei Open Platform Client ID
|
|
id: kingfisher.huawei.1
|
|
pattern: |
|
|
(?xi)
|
|
\b
|
|
huawei
|
|
(?:.|[\n\r]){0,32}?
|
|
(?:\b|_)(?:client[_-]?id|app[_-]?id)\b
|
|
(?:.|[\n\r]){0,16}?
|
|
[=:"'\s]
|
|
\b
|
|
(
|
|
[0-9]{6,12}
|
|
)
|
|
\b
|
|
pattern_requirements:
|
|
min_digits: 6
|
|
min_entropy: 2.0
|
|
confidence: medium
|
|
visible: false
|
|
examples:
|
|
- "{ \"Huawei\": { \"ClientId\": \"100809947\", \"ClientSecret\": \"...\" } }"
|
|
- "HUAWEI_APP_ID=100023456"
|
|
references:
|
|
- https://developer.huawei.com/consumer/en/doc/development/HMS-Guides/38054564
|
|
|
|
- name: Huawei Open Platform Client Secret
|
|
id: kingfisher.huawei.2
|
|
pattern: |
|
|
(?xi)
|
|
\b
|
|
huawei
|
|
(?:.|[\n\r]){0,64}?
|
|
\b(?:client[_-]?secret|app[_-]?secret)\b
|
|
(?:.|[\n\r]){0,16}?
|
|
[=:"'\s]
|
|
\b
|
|
(
|
|
[a-f0-9]{64}
|
|
)
|
|
\b
|
|
pattern_requirements:
|
|
min_digits: 8
|
|
min_entropy: 3.5
|
|
confidence: medium
|
|
examples:
|
|
- "{ \"Huawei\": { \"ClientId\": \"100809947\", \"ClientSecret\": \"9c94020cf0aed099bc88c0e57b613fdd55cdcec2590b55fa5693a9d672cad2d5\" } }"
|
|
- "huawei\nclient_secret=1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b"
|
|
references:
|
|
- https://developer.huawei.com/consumer/en/doc/development/HMS-Guides/38054564
|
|
# No standalone validation: Huawei OAuth2 requires both client_id and
|
|
# client_secret together for the token endpoint. Cannot combine two
|
|
# captured groups in a single HTTP validation request.
|