Scan report
aws / aws-sdk-php
Could an attacker exploit mistakes in this code?
120
risk score
Serious issues. Review the high-severity findings before using it.
- High
- 21
- Medium
- 6
- Low
- 0
Sources: Bandit, Semgrep, pip-audit
Does this code look like it is trying to cause harm?
0
risk score
No issues of this kind were found.
- High
- 0
- Medium
- 0
- Low
- 2
Sources: YARA, ClamAV, GuardDog, dependency checker
29
total findings
- Likely real
- 14
- Uncertain
- 9
- Likely noise
- 6
The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.
What we found, in plain English
This repository has a high vulnerability score of 120.0, which means there are several serious coding mistakes that could let attackers exploit the code in dangerous ways. The scan found many instances of hardcoded secrets like AWS keys and tokens, as well as commands that might be executed by users if they provide input, but these issues appear to be common errors rather than signs of malicious intent. While some tools flagged a YARA rule for downloading files, this is considered a low-risk finding that does not pose an immediate threat. Overall, the code contains significant security flaws that need to be fixed before it can be used in production environments.
Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.
Detections by engine
Score over time
Overall score each time this repository was scanned.
Findings
Highest severity first. Select a finding to see the code and what it means.
-
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/lex-models/2017-04-19/examples-1.json.php line 3
- Likely real
- Yes, 99% confidence
Sauce Token detected
return [ 'version' => '1.0', 'examples' => [ 'GetBot' => [ [ 'input' => [ 'name' => 'DocOrderPizza', 'versionOrAlias' => '$LATEST', ], 'output' => [ 'version' => '$LATEST', 'name' => 'DocOrderPizzaBot', 'abortStatement' => [ 'messages' => [ [ 'content' => 'I don\'t understand. Can you try again?', 'contentType' => 'PlainText', ], [ 'content' => 'I\'m sorry, I don\'t understand.', 'contentType' => 'PlainText', ], ], ], 'checksum' => '20172ee3-fa06-49b2-bbc5-667c090303e9', 'childDirected' => true, 'clarificationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'I\'m sorry, I didn\'t hear that. Can you repeate what you just said?', 'contentType' => 'PlainText', ], [ 'content' => 'Can you say that again?', 'contentType' => 'PlainText', ], ], ], 'createdDate' => 1494360160.133, 'description' => 'Orders a pizza from a local pizzeria.', 'idleSessionTTLInSeconds' => 300, 'intents' => [ [ 'intentName' => 'DocOrderPizza', 'intentVersion' => '$LATEST', ], ], 'lastUpdatedDate' => 1494360160.133, 'locale' => 'en-US', 'status' => 'NOT_BUILT', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to get configuration information for a bot.', 'id' => 'to-get-information-about-a-bot-1494431724188', 'title' => 'To get information about a bot', ], ], 'GetBots' => [ [ 'input' => [ 'maxResults' => 5, 'nextToken' => '', ], 'output' => [ 'bots' => [ [ 'version' => '$LATEST', 'name' => 'DocOrderPizzaBot', 'createdDate' => 1494360160.133, 'description' => 'Orders a pizza from a local pizzeria.', 'lastUpdatedDate' => 1494360160.133, 'status' => 'NOT_BUILT', ], ], ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to get a list of all of the bots in your account.', 'id' => 'to-get-a-list-of-bots-1494432220036', 'title' => 'To get a list of bots', ], ], 'GetIntent' => [ [ 'input' => [ 'version' => '$LATEST', 'name' => 'DocOrderPizza', ], 'output' => [ 'version' => '$LATEST', 'name' => 'DocOrderPizza', 'checksum' => 'ca9bc13d-afc8-4706-bbaf-091f7a5935d6', 'conclusionStatement' => [ 'messages' => [ [ 'content' => 'All right, I ordered you a {Crust} crust {Type} pizza with {Sauce} sauce.', 'contentType' => 'PlainText', ], [ 'content' => 'OK, your {Crust} crust {Type} pizza with {Sauce} sauce is on the way.', 'contentType' => 'PlainText', ], ], 'responseCard' => 'foo', ], 'confirmationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'Should I order your {Crust} crust {Type} pizza with {Sauce} sauce?', 'contentType' => 'PlainText', ], ], ], 'createdDate' => 1494359783.453, 'description' => 'Order a pizza from a local pizzeria.', 'fulfillmentActivity' => [ 'type' => 'ReturnIntent', ], 'lastUpdatedDate' => 1494359783.453, 'rejectionStatement' => [ 'messages' => [ [ 'content' => 'Ok, I\'ll cancel your order.', 'contentType' => 'PlainText', ], [ 'content' => 'I cancelled your order.', 'contentType' => 'PlainText', ], ], ], 'sampleUtterances' => [ 'Order me a pizza.', 'Order me a {Type} pizza.', 'I want a {Crust} crust {Type} pizza', 'I want a {Crust} crust {Type} pizza with {Sauce} sauce.', ], 'slots' => [ [ 'name' => 'Type', 'description' => 'The type of pizza to order.', 'priority' => 1, 'sampleUtterances' => [ 'Get me a {Type} pizza.', 'A {Type} pizza please.', 'I\'d like a {Type} pizza.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'What type of pizza would you like?', 'contentType' => 'PlainText', ], [ 'content' => 'Vegie or cheese pizza?', 'contentType' => 'PlainText', ], [ 'content' => 'I can get you a vegie or a cheese pizza.', 'contentType' => 'PlainText', ], ], ], ], [ 'name' => 'Crust', 'description' => 'The type of pizza crust to order.', 'priority' => 2, 'sampleUtterances' => [ 'Make it a {Crust} crust.', 'I\'d like a {Crust} crust.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaCrustType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'What type of crust would you like?', 'contentType' => 'PlainText', ], [ 'content' => 'Thick or thin crust?', 'contentType' => 'PlainText', ], ], ], ], [ 'name' => 'Sauce', 'description' => 'The type of sauce to use on the pizza.', 'priority' => 3, 'sampleUtterances' => [ 'Make it {Sauce} sauce.', 'I\'d like {Sauce} sauce.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaSauceType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'White or red sauce?', 'contentType' => 'PlainText', ], [ 'content' => 'Garlic or tomato sauce?', 'contentType' => 'PlainText', ], ], ], ], ], ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to get information about an intent.', 'id' => 'to-get-a-information-about-an-intent-1494432574147', 'title' => 'To get a information about an intent', ], ], 'GetIntents' => [ [ 'input' => [ 'maxResults' => 10, 'nextToken' => '', ], 'output' => [ 'intents' => [ [ 'version' => '$LATEST', 'name' => 'DocOrderPizza', 'createdDate' => 1494359783.453, 'description' => 'Order a pizza from a local pizzeria.', 'lastUpdatedDate' => 1494359783.453, ], ], ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to get a list of all of the intents in your account.', 'id' => 'to-get-a-list-of-intents-1494432416363', 'title' => 'To get a list of intents', ], ], 'GetSlotType' => [ [ 'input' => [ 'version' => '$LATEST', 'name' => 'DocPizzaCrustType', ], 'output' => [ 'version' => '$LATEST', 'name' => 'DocPizzaCrustType', 'checksum' => '210b3d5a-90a3-4b22-ac7e-f50c2c71095f', 'createdDate' => 1494359274.403, 'description' => 'Available crust types', 'enumerationValues' => [ [ 'value' => 'thick', ], [ 'value' => 'thin', ], ], 'lastUpdatedDate' => 1494359274.403, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to get information about a slot type.', 'id' => 'to-get-information-about-a-slot-type-1494432961004', 'title' => 'To get information about a slot type', ], ], 'GetSlotTypes' => [ [ 'input' => [ 'maxResults' => 10, 'nextToken' => '', ], 'output' => [ 'slotTypes' => [ [ 'version' => '$LATEST', 'name' => 'DocPizzaCrustType', 'createdDate' => 1494359274.403, 'description' => 'Available crust types', 'lastUpdatedDate' => 1494359274.403, ], [ 'version' => '$LATEST', 'name' => 'DocPizzaSauceType', 'createdDate' => 1494356442.23, 'description' => 'Available pizza sauces', 'lastUpdatedDate' => 1494356442.23, ], [ 'version' => '$LATEST', 'name' => 'DocPizzaType', 'createdDate' => 1494359198.656, 'description' => 'Available pizzas', 'lastUpdatedDate' => 1494359198.656, ], ], ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to get a list of all of the slot types in your account.', 'id' => 'to-get-a-list-of-slot-types-1494432757458', 'title' => 'To get a list of slot types', ], ], 'PutBot' => [ [ 'input' => [ 'name' => 'DocOrderPizzaBot', 'abortStatement' => [ 'messages' => [ [ 'content' => 'I don\'t understand. Can you try again?', 'contentType' => 'PlainText', ], [ 'content' => 'I\'m sorry, I don\'t understand.', 'contentType' => 'PlainText', ], ], ], 'childDirected' => true, 'clarificationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'I\'m sorry, I didn\'t hear that. Can you repeat what you just said?', 'contentType' => 'PlainText', ], [ 'content' => 'Can you say that again?', 'contentType' => 'PlainText', ], ], ], 'description' => 'Orders a pizza from a local pizzeria.', 'idleSessionTTLInSeconds' => 300, 'intents' => [ [ 'intentName' => 'DocOrderPizza', 'intentVersion' => '$LATEST', ], ], 'locale' => 'en-US', 'processBehavior' => 'SAVE', ], 'output' => [ 'version' => '$LATEST', 'name' => 'DocOrderPizzaBot', 'abortStatement' => [ 'messages' => [ [ 'content' => 'I don\'t understand. Can you try again?', 'contentType' => 'PlainText', ], [ 'content' => 'I\'m sorry, I don\'t understand.', 'contentType' => 'PlainText', ], ], ], 'checksum' => '20172ee3-fa06-49b2-bbc5-667c090303e9', 'childDirected' => true, 'clarificationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'I\'m sorry, I didn\'t hear that. Can you repeate what you just said?', 'contentType' => 'PlainText', ], [ 'content' => 'Can you say that again?', 'contentType' => 'PlainText', ], ], ], 'createdDate' => 1494360160.133, 'description' => 'Orders a pizza from a local pizzeria.', 'idleSessionTTLInSeconds' => 300, 'intents' => [ [ 'intentName' => 'DocOrderPizza', 'intentVersion' => '$LATEST', ], ], 'lastUpdatedDate' => 1494360160.133, 'locale' => 'en-US', 'status' => 'NOT_BUILT', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to create a bot for ordering pizzas.', 'id' => 'to-create-a-bot-1494360003886', 'title' => 'To create a bot', ], ], 'PutIntent' => [ [ 'input' => [ 'name' => 'DocOrderPizza', 'conclusionStatement' => [ 'messages' => [ [ 'content' => 'All right, I ordered you a {Crust} crust {Type} pizza with {Sauce} sauce.', 'contentType' => 'PlainText', ], [ 'content' => 'OK, your {Crust} crust {Type} pizza with {Sauce} sauce is on the way.', 'contentType' => 'PlainText', ], ], 'responseCard' => 'foo', ], 'confirmationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'Should I order your {Crust} crust {Type} pizza with {Sauce} sauce?', 'contentType' => 'PlainText', ], ], ], 'description' => 'Order a pizza from a local pizzeria.', 'fulfillmentActivity' => [ 'type' => 'ReturnIntent', ], 'rejectionStatement' => [ 'messages' => [ [ 'content' => 'Ok, I\'ll cancel your order.', 'contentType' => 'PlainText', ], [ 'content' => 'I cancelled your order.', 'contentType' => 'PlainText', ], ], ], 'sampleUtterances' => [ 'Order me a pizza.', 'Order me a {Type} pizza.', 'I want a {Crust} crust {Type} pizza', 'I want a {Crust} crust {Type} pizza with {Sauce} sauce.', ], 'slots' => [ [ 'name' => 'Type', 'description' => 'The type of pizza to order.', 'priority' => 1, 'sampleUtterances' => [ 'Get me a {Type} pizza.', 'A {Type} pizza please.', 'I\'d like a {Type} pizza.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'What type of pizza would you like?', 'contentType' => 'PlainText', ], [ 'content' => 'Vegie or cheese pizza?', 'contentType' => 'PlainText', ], [ 'content' => 'I can get you a vegie or a cheese pizza.', 'contentType' => 'PlainText', ], ], ], ], [ 'name' => 'Crust', 'description' => 'The type of pizza crust to order.', 'priority' => 2, 'sampleUtterances' => [ 'Make it a {Crust} crust.', 'I\'d like a {Crust} crust.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaCrustType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'What type of crust would you like?', 'contentType' => 'PlainText', ], [ 'content' => 'Thick or thin crust?', 'contentType' => 'PlainText', ], ], ], ], [ 'name' => 'Sauce', 'description' => 'The type of sauce to use on the pizza.', 'priority' => 3, 'sampleUtterances' => [ 'Make it {Sauce} sauce.', 'I\'d like {Sauce} sauce.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaSauceType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'White or red sauce?', 'contentType' => 'PlainText', ], [ 'content' => 'Garlic or tomato sauce?', 'contentType' => 'PlainText', ], ], ], ], ], ], 'output' => [ 'version' => '$LATEST', 'name' => 'DocOrderPizza', 'checksum' => 'ca9bc13d-afc8-4706-bbaf-091f7a5935d6', 'conclusionStatement' => [ 'messages' => [ [ 'content' => 'All right, I ordered you a {Crust} crust {Type} pizza with {Sauce} sauce.', 'contentType' => 'PlainText', ], [ 'content' => 'OK, your {Crust} crust {Type} pizza with {Sauce} sauce is on the way.', 'contentType' => 'PlainText', ], ], 'responseCard' => 'foo', ], 'confirmationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'Should I order your {Crust} crust {Type} pizza with {Sauce} sauce?', 'contentType' => 'PlainText', ], ], ], 'createdDate' => 1494359783.453, 'description' => 'Order a pizza from a local pizzeria.', 'fulfillmentActivity' => [ 'type' => 'ReturnIntent', ], 'lastUpdatedDate' => 1494359783.453, 'rejectionStatement' => [ 'messages' => [ [ 'content' => 'Ok, I\'ll cancel your order.', 'contentType' => 'PlainText', ], [ 'content' => 'I cancelled your order.', 'contentType' => 'PlainText', ], ], ], 'sampleUtterances' => [ 'Order me a pizza.', 'Order me a {Type} pizza.', 'I want a {Crust} crust {Type} pizza', 'I want a {Crust} crust {Type} pizza with {Sauce} sauce.', ], 'slots' => [ [ 'name' => 'Sauce', 'description' => 'The type of sauce to use on the pizza.', 'priority' => 3, 'sampleUtterances' => [ 'Make it {Sauce} sauce.', 'I\'d like {Sauce} sauce.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaSauceType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'White or red sauce?', 'contentType' => 'PlainText', ], [ 'content' => 'Garlic or tomato sauce?', 'contentType' => 'PlainText', ], ], ], ], [ 'name' => 'Type', 'description' => 'The type of pizza to order.', 'priority' => 1, 'sampleUtterances' => [ 'Get me a {Type} pizza.', 'A {Type} pizza please.', 'I\'d like a {Type} pizza.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'What type of pizza would you like?', 'contentType' => 'PlainText', ], [ 'content' => 'Vegie or cheese pizza?', 'contentType' => 'PlainText', ], [ 'content' => 'I can get you a vegie or a cheese pizza.', 'contentType' => 'PlainText', ], ], ], ], [ 'name' => 'Crust', 'description' => 'The type of pizza crust to order.', 'priority' => 2, 'sampleUtterances' => [ 'Make it a {Crust} crust.', 'I\'d like a {Crust} crust.', ], 'slotConstraint' => 'Required', 'slotType' => 'DocPizzaCrustType', 'slotTypeVersion' => '$LATEST', 'valueElicitationPrompt' => [ 'maxAttempts' => 1, 'messages' => [ [ 'content' => 'What type of crust would you like?', 'contentType' => 'PlainText', ], [ 'content' => 'Thick or thin crust?', 'contentType' => 'PlainText', ], ], ], ], ], ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to create an intent for ordering pizzas.', 'id' => 'to-create-an-intent-1494358144659', 'title' => 'To create an intent', ], ], 'PutSlotType' => [ [ 'input' => [ 'name' => 'PizzaSauceType', 'description' => 'Available pizza sauces', 'enumerationValues' => [ [ 'value' => 'red', ], [ 'value' => 'white', ], ], ], 'output' => [ 'version' => '$LATEST', 'name' => 'DocPizzaSauceType', 'checksum' => 'cfd00ed1-775d-4357-947c-aca7e73b44ba', 'createdDate' => 1494356442.23, 'description' => 'Available pizza sauces', 'enumerationValues' => [ [ 'value' => 'red', ], [ 'value' => 'white', ], ], 'lastUpdatedDate' => 1494356442.23, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => 'This example shows how to create a slot type that describes pizza sauces.', 'id' => 'to-create-a-slot-type-1494357262258', 'title' => 'To Create a Slot Type', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/launch-wizard/2018-05-10/examples-1.json line 120
- Likely real
- Yes, 73% confidence
AWS Access Key ID Value detected. This is a sensitive credential and should not be hardcoded here. Instead, read this value from an environment variable or keep it in a separate, private file.
"iconUrl": "https://aws-lw-workload-assets-test-us-east-1.s3.amazonaws.com/amazon/SAP/icon.png?X-Amz-Security-Token=IQoJb3JpZ2luX2VjEAUaCXVzLWVhc3QtMSJHMEUCIC4l3GCH4o%2Bgq3pJzcD1YJmtrmyNCoEgG2RIayjDWf9kAiEAnMK5nYixaZLuF1s1UVoNd7xIbDrOQ8EAbhcZWexMp9cq7wIIrf%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAEGgw1ODI1NTgxMjEyMDYiDHxMN%2BZ8CoPORzvo4yrDAtkVZlBVxLwnFmwHw005vo13LOUUbyajEpp3HNh%2BaBL8K2DLx7Kzi0UPPD6z8pL1eiFLHAQ9zZgVc7pLVQjBKOdcw1GmIADDepqYEb%2B8zLi7zwWP1JT72YbT6ZXSoWpb5NCqcyAvdK47b0Ae586s6VkWzoeJ65jR%2FgbJMhRpFpqVSP2XI6Rf6yA3%2BkQyUCk3RdyF4ljIL8Nf5nIFb%2BOMK2PZ8aJX85l1j7UpJE1rfNb1PitVcQz3KlW5xkiXfcWRKeVhgHRyuCEL3FY0DyPFdqe3NxcA0%2FzPgBq6Y9B41kM6af5u2kQRfQOjWejDpzpG7w40eaIKAYnhBkjIA9550geSLB7O%2FuAPQLI9fI2lVowIBUKsKVOr0%2FFGIzW3WM7%2BbEx%2FZ0mDkP1IhcpZdP7owC77K8O%2BXDgBCabAy48K3ndi%2BQKQMPXjz6YGOp4Bbgv9mVc3sE4KvXZv1skhnOYcOKGdCncIKLne0W%2BgO3URxyDQiyO2FhM3OekXDH83CNCyDVIpkgpWkvgXDSaZiD5mj0T9iqEeJzfh6uQvX1dRN%2BxI1eV0M7HKY2e7F%2BKNjeLhzKgKpSpDqFIUSjLeBlLLyQCNKuUiO3DMiy3rB89aX4b9wyC8au0SfGb72YyNLXjh6M1whcj1VNGePyw%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20230809T202649Z&X-Amz-SignedHeaders=host&X-Amz-Expires=3600&X-Amz-Credential=ASIAYPIZLPT3GGDNTHTI%2F20230809%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=6a37e41e47208b426a5e7d32392d0815388cd0231187652204836943c37ad86a", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/launch-wizard/2018-05-10/examples-1.json.php line 3
- Likely real
- Yes, 73% confidence
AWS Access Key ID Value detected. This is a sensitive credential and should not be hardcoded here. Instead, read this value from an environment variable or keep it in a separate, private file.
return [ 'version' => '1.0', 'examples' => [ 'CreateDeployment' => [ [ 'input' => [ 'name' => 'TestDeployment1', 'deploymentPatternName' => 'SapHanaSingle', 'dryRun' => false, 'specifications' => [ 'CreateSecurityGroup' => 'No', 'DisableDeploymentRollback' => 'Yes', 'EnableEbsVolumeEncryption' => 'Yes', 'KeyPairName' => 'keyName', 'ProxyServerAddress' => 'http://xyz.abc.com:8080', 'SapSysGroupId' => '5003', 'SapVirtualIPOptIn' => 'No', 'SaveDeploymentArtifacts' => 'No', 'SnsTopicArn' => 'arn:aws:sns:us-east-1:111111222222:snsNameUsEast1.fifo', 'Timezone' => 'Pacific/Wake', 'VpcId' => 'vpc-1234566', ], 'workloadName' => 'SAP', ], 'output' => [ 'deploymentId' => '4c1b59c1-659c-467f-b6e9-6ef6f9d28e1d', ], 'id' => 'example-1', 'title' => 'Deploy a given workload with given settings.', ], [ 'input' => [ 'name' => 'TestDeployment2', 'deploymentPatternName' => 'SapHanaSingle', 'dryRun' => false, 'specifications' => [ 'CreateSecurityGroup' => 'No', 'DisableDeploymentRollback' => 'Yes', 'EnableEbsVolumeEncryption' => 'Yes', 'KeyPairName' => 'keyName', 'ProxyServerAddress' => 'http://xyz.abc.com:8080', 'SapSysGroupId' => '5003', 'SapVirtualIPOptIn' => 'No', 'SaveDeploymentArtifacts' => 'No', 'SnsTopicArn' => 'arn:aws:sns:us-east-1:111111222222:snsNameUsEast1.fifo', 'Timezone' => 'Pacific/Wake', 'VpcId' => 'vpc-1234566', ], 'tags' => [ 'key1' => 'val1', 'key2' => 'val2', ], 'workloadName' => 'SAP', ], 'output' => [ 'deploymentId' => '1111111-1111-1111-1111-111111111111', ], 'id' => 'example-2', 'title' => 'Deploy a given workload with given settings and passing tags for Launch Wizard deployment resource.', ], ], 'DeleteDeployment' => [ [ 'input' => [ 'deploymentId' => '4c1b59c1-659c-467f-b6e9-6ef6f9d28e1d', ], 'output' => [ 'status' => 'DELETED', 'statusReason' => 'Finished processing DeleteApp request', ], 'id' => 'example-1', 'title' => 'Delete a deployment.', ], ], 'GetDeployment' => [ [ 'input' => [ 'deploymentId' => '1111111-1111-1111-1111-111111111111', ], 'output' => [ 'deployment' => [ 'name' => 'SapHanaSingleForTest', 'createdAt' => '2023-04-24T13:10:09.857Z', 'deploymentArn' => 'arn:aws:launchwizard:us-east-1:123456789012:deployment/1111111-1111-1111-1111-111111111111', 'id' => '1111111-1111-1111-1111-111111111111', 'specifications' => [ 'DisableDeploymentRollback' => 'true', 'Encryption' => 'Yes', 'KeyName' => 'testLinuxInstance', 'SAPTZ' => 'America/Vancouver', 'VPCID' => 'vpc-1234567', 'applicationName' => 'SapHanaSingleForTest', 'deploymentScenario' => 'SapHanaSingle', 'environmentType' => 'production', 'saveArtifactsS3Uri' => 's3://testbucket', 'saveDeploymentArtifacts' => 'Yes', ], 'status' => 'FAILED', 'tags' => [ 'key1' => 'val1', 'key2' => 'val2', ], 'workloadName' => 'SapHanaSingle', ], ], 'id' => 'example-1', 'title' => 'Get details about a given deployment.', ], ], 'GetWorkload' => [ [ 'input' => [ 'workloadName' => 'SAP', ], 'output' => [ 'workload' => [ 'documentationUrl' => 'https://docs.aws.amazon.com/launchwizard/latest/userguide/launch-wizard-sap.html', 'description' => 'Workload Description', 'displayName' => 'SAP', 'iconUrl' => 'https://aws-lw-workload-assets-test-us-east-1.s3.amazonaws.com/amazon/SAP/icon.png?X-Amz-Security-Token=IQoJb3JpZ2luX2VjEAUaCXVzLWVhc3QtMSJHMEUCIC4l3GCH4o%2Bgq3pJzcD1YJmtrmyNCoEgG2RIayjDWf9kAiEAnMK5nYixaZLuF1s1UVoNd7xIbDrOQ8EAbhcZWexMp9cq7wIIrf%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAEGgw1ODI1NTgxMjEyMDYiDHxMN%2BZ8CoPORzvo4yrDAtkVZlBVxLwnFmwHw005vo13LOUUbyajEpp3HNh%2BaBL8K2DLx7Kzi0UPPD6z8pL1eiFLHAQ9zZgVc7pLVQjBKOdcw1GmIADDepqYEb%2B8zLi7zwWP1JT72YbT6ZXSoWpb5NCqcyAvdK47b0Ae586s6VkWzoeJ65jR%2FgbJMhRpFpqVSP2XI6Rf6yA3%2BkQyUCk3RdyF4ljIL8Nf5nIFb%2BOMK2PZ8aJX85l1j7UpJE1rfNb1PitVcQz3KlW5xkiXfcWRKeVhgHRyuCEL3FY0DyPFdqe3NxcA0%2FzPgBq6Y9B41kM6af5u2kQRfQOjWejDpzpG7w40eaIKAYnhBkjIA9550geSLB7O%2FuAPQLI9fI2lVowIBUKsKVOr0%2FFGIzW3WM7%2BbEx%2FZ0mDkP1IhcpZdP7owC77K8O%2BXDgBCabAy48K3ndi%2BQKQMPXjz6YGOp4Bbgv9mVc3sE4KvXZv1skhnOYcOKGdCncIKLne0W%2BgO3URxyDQiyO2FhM3OekXDH83CNCyDVIpkgpWkvgXDSaZiD5mj0T9iqEeJzfh6uQvX1dRN%2BxI1eV0M7HKY2e7F%2BKNjeLhzKgKpSpDqFIUSjLeBlLLyQCNKuUiO3DMiy3rB89aX4b9wyC8au0SfGb72YyNLXjh6M1whcj1VNGePyw%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20230809T202649Z&X-Amz-SignedHeaders=host&X-Amz-Expires=3600&X-Amz-Credential=ASIAYPIZLPT3GGDNTHTI%2F20230809%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=6a37e41e47208b426a5e7d32392d0815388cd0231187652204836943c37ad86a', 'status' => 'ACTIVE', 'workloadName' => 'SAP', ], ], 'id' => 'example-1', 'title' => 'Get details about a specific workload.', ], ], 'GetWorkloadDeploymentPattern' => [ [ 'input' => [ 'deploymentPatternName' => 'adSelfManagedNewVpc', 'workloadName' => 'MicrosoftActiveDirectory', ], 'output' => [ 'workloadDeploymentPattern' => [ 'deploymentPatternName' => 'adSelfManagedNewVpc', 'deploymentPatternVersionName' => '2024-03-19-14-00-09', 'description' => 'Builds a new AWS environment (VPC and other components), and deploys AD DS into this new VPC.', 'displayName' => 'Self-managed AD - new VPC', 'specifications' => [ [ 'name' => 'NumberOfAZs', 'required' => 'Yes', 'description' => 'Number of Availability Zones to use in the VPC.', ], [ 'name' => 'AvailabilityZones', 'required' => 'Yes', 'description' => 'List of Availability Zones (AZs) to use for the subnets in the VPC.', ], [ 'name' => 'VPCCIDR', 'required' => 'Yes', 'description' => 'CIDR block for the VPC.', ], ], 'status' => 'ACTIVE', 'workloadName' => 'MicrosoftActiveDirectory', ], ], 'id' => 'example-1', 'title' => 'Get details about a specific Workload deployment pattern', ], ], 'ListDeploymentEvents' => [ [ 'input' => [ 'deploymentId' => '4c1b59c1-659c-467f-b6e9-6ef6f9d28e1d', ], 'output' => [ 'deploymentEvents' => [ [ 'name' => 'Create secure parameter', 'description' => 'Creates a new secure parameter', 'status' => 'COMPLETED', 'statusReason' => '', 'timestamp' => '2023-04-24T13:10:39.123Z', ], [ 'name' => 'Create resource group', 'description' => 'Creates a resource group with all the application resources', 'status' => 'COMPLETED', 'statusReason' => '', 'timestamp' => '2023-04-24T13:10:42.238Z', ], ], ], 'id' => 'example-1', 'title' => 'List all actions taken during a deployment.', ], ], 'ListDeploymentPatternVersions' => [ [ 'input' => [ 'deploymentPatternName' => 'default', 'workloadName' => 'security-automations-for-aws-waf', ], 'output' => [ 'deploymentPatternVersions' => [ [ 'deploymentPatternName' => 'default', 'deploymentPatternVersionName' => '4.0.6', 'workloadName' => 'security-automations-for-aws-waf', ], [ 'deploymentPatternName' => 'default', 'deploymentPatternVersionName' => '3.2.5', 'workloadName' => 'security-automations-for-aws-waf', ], [ 'deploymentPatternName' => 'default', 'deploymentPatternVersionName' => '3.1.0', 'workloadName' => 'security-automations-for-aws-waf', ], ], ], 'id' => 'example-1', 'title' => 'List all visible versions for the given workload and deployment pattern.', ], [ 'input' => [ 'deploymentPatternName' => 'default', 'filters' => [ [ 'name' => 'updateFromVersion', 'values' => [ '4.0.2', ], ], ], 'workloadName' => 'security-automations-for-aws-waf', ], 'output' => [ 'deploymentPatternVersions' => [ [ 'deploymentPatternName' => 'default', 'deploymentPatternVersionName' => '4.0.6', 'workloadName' => 'security-automations-for-aws-waf', ], ], ], 'id' => 'example-2', 'title' => 'List filtered versions for the given workload and deployment pattern.', ], ], 'ListDeployments' => [ [ 'input' => [ 'filters' => [ [ 'name' => 'DEPLOYMENT_STATUS', 'values' => [ 'IN_PROGRESS', ], ], ], ], 'output' => [ 'deployments' => [ [ 'name' => 'SapHanaSingleForTest', 'createdAt' => '2023-04-24T13:10:09.857Z', 'id' => '4c1b59c1-659c-467f-b6e9-6ef6f9d28e1d', 'patternName' => 'SapHanaSingle', 'status' => 'IN_PROGRESS', 'workloadName' => 'SAP', ], ], ], 'id' => 'example-1', 'title' => 'List deployments in the account with filters.', ], ], 'ListTagsForResource' => [ [ 'input' => [ 'resourceArn' => 'arn:aws:launchwizard:us-east-1:123456789012:deployment/11111111-1111-1111-1111-111111111111', ], 'output' => [ 'tags' => [ 'key1' => 'value1', 'key2' => 'value2', ], ], 'id' => 'example-1', 'title' => 'Listing tags on a Launch Wizard deployment resource.', ], ], 'ListWorkloadDeploymentPatterns' => [ [ 'input' => [ 'workloadName' => 'SAP', ], 'output' => [ 'workloadDeploymentPatterns' => [ [ 'deploymentPatternName' => 'SapHanaHA', 'deploymentPatternVersionName' => '2023-08-02-01-00-00', 'description' => 'Deployment Option Description', 'displayName' => 'Deployment Option Display Name', 'status' => 'ACTIVE', 'workloadName' => 'SAP', ], [ 'deploymentPatternName' => 'SapHanaMulti', 'deploymentPatternVersionName' => '2023-08-02-01-00-00', 'description' => 'Deployment Option Description', 'displayName' => 'Deployment Option Display Name', 'status' => 'ACTIVE', 'workloadName' => 'SAP', ], ], ], 'id' => 'example-1', 'title' => 'List all available workloads supported by AWS Launch Wizard.', ], ], 'ListWorkloads' => [ [ 'input' => [], 'output' => [ 'workloads' => [ [ 'displayName' => 'SAP', 'status' => 'ACTIVE', 'workloadName' => 'SAP', ], [ 'displayName' => 'MS SQL Server', 'status' => 'ACTIVE', 'workloadName' => 'SQL', ], ], ], 'id' => 'example-1', 'title' => 'List all available workloads supported by AWS Launch Wizard.', ], ], 'TagResource' => [ [ 'input' => [ 'resourceArn' => 'arn:aws:launchwizard:us-east-1:123456789012:deployment/11111111-1111-1111-1111-111111111111', 'tags' => [ 'key1' => 'value1', 'key2' => 'value2', ], ], 'output' => [], 'id' => 'example-1', 'title' => 'Adding tags to a Launch Wizard deployment resource.', ], ], 'UntagResource' => [ [ 'input' => [ 'resourceArn' => 'arn:aws:launchwizard:us-east-1:123456789012:deployment/11111111-1111-1111-1111-111111111111', 'tagKeys' => [ 'key1', 'key2', ], ], 'output' => [], 'id' => 'example-1', 'title' => 'Removing tags on a Launch Wizard deployment resource.', ], ], 'UpdateDeployment' => [ [ 'input' => [ 'deploymentId' => '4c1b59c1-659c-467f-b6e9-6ef6f9d28e1d', 'dryRun' => false, 'specifications' => [ 'CreateSecurityGroup' => 'No', 'DeploymentArtifactsS3Uri' => 'aws-bucket-name', 'DisableDeploymentRollback' => 'No', 'EnableEbsVolumeEncryption' => 'No', 'KeyPairName' => 'keyName', 'ProxyServerAddress' => 'http://mno.abc.com:8080', 'SapSysGroupId' => '5003', 'SapVirtualIPOptIn' => 'No', 'SaveDeploymentArtifacts' => 'Yes', 'SnsTopicArn' => 'arn:aws:sns:us-east-1:111111222222:snsNameUsEast1.fifo', 'Timezone' => 'Pacific/Wake', 'VpcId' => 'vpc-1234567', ], ], 'output' => [ 'deployment' => [ 'name' => 'TestDeployment1', 'createdAt' => 1736286728468, 'id' => '4c1b59c1-659c-467f-b6e9-6ef6f9d28e1d', 'patternName' => 'SapHanaSingle', 'status' => 'UPDATE_IN_PROGRESS', 'workloadName' => 'SAP', ], ], 'id' => 'example-1', 'title' => 'Edit deployment specifications.', ], [ 'input' => [ 'deploymentId' => '4c1b59c1-659c-467f-b6e9-6ef6f9d28e1d', 'deploymentPatternVersionName' => '2.0.0', 'dryRun' => false, 'specifications' => [ 'CreateSecurityGroup' => 'No', 'DeploymentArtifactsS3Uri' => 'aws-bucket-name', 'DisableDeploymentRollback' => 'No', 'EnableEbsVolumeEncryption' => 'No', 'KeyPairName' => 'keyName', 'NewParameter' => 'Allow', 'ProxyServerAddress' => 'http://mno.abc.com:8080', 'SapSysGroupId' => '5003', 'SapVirtualIPOptIn' => 'No', 'SaveDeploymentArtifacts' => 'Yes', 'SnsTopicArn' => 'arn:aws:sns:us-east-1:111111222222:snsNameUsEast1.fifo', 'Timezone' => 'Pacific/Wake', 'VpcId' => 'vpc-1234567', ], ], 'output' => [ 'deployment' => [ 'name' => 'TestDeployment1', 'createdAt' => 1736286728468, 'id' => '4c1b59c1-659c-467f-b6e9-6ef6f9d28e1d', 'patternName' => 'SapHanaSingle', 'status' => 'UPDATE_IN_PROGRESS', 'workloadName' => 'SAP', ], ], 'id' => 'example-2', 'title' => 'Update deployment version.', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json line 8
- Likely real
- Yes, 51% confidence
Generic Secret detected
"clientSecret": "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json line 29
- Likely real
- Yes, 51% confidence
Generic Secret detected
"clientSecret": "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json line 198
- Likely real
- Yes, 51% confidence
Generic Secret detected
"clientSecret": "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json line 214
- Likely real
- Yes, 51% confidence
Generic Secret detected
"clientSecret": "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json.php line 3
- Likely real
- Yes, 51% confidence
Generic Secret detected
return [ 'version' => '1.0', 'examples' => [ 'CreateToken' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'grantType' => 'urn:ietf:params:oauth:grant-type:device-code', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-device-code', 'title' => 'Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication', ], [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'codewhisperer:completions', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication', ], ], 'CreateTokenWithIAM' => [ [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'code' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE', 'grantType' => 'authorization_code', 'redirectUri' => 'https://mywebapp.example/redirect', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-auth-code', 'title' => 'Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication', ], [ 'input' => [ 'assertion' => 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.eyJ2ZXIiOiIyLjAiLCJpc3MiOiJodHRwczovL2xvZ2luLm1pY3Jvc29mdG9ubGluZS5jb20vOTEyMjA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkL3YyLjAiLCJzdWIiOiJBQUFBQUFBQUFBQUFBQUFBQUFBQUFJa3pxRlZyU2FTYUZIeTc4MmJidGFRIiwiYXVkIjoiNmNiMDQwMTgtYTNmNS00NmE3LWI5OTUtOTQwYzc4ZjVhZWYzIiwiZXhwIjoxNTM2MzYxNDExLCJpYXQiOjE1MzYyNzQ3MTEsIm5iZiI6MTUzNjI3NDcxMSwibmFtZSI6IkFiZSBMaW5jb2xuIiwicHJlZmVycmVkX3VzZXJuYW1lIjoiQWJlTGlAbWljcm9zb2Z0LmNvbSIsIm9pZCI6IjAwMDAwMDAwLTAwMDAtMDAwMC02NmYzLTMzMzJlY2E3ZWE4MSIsInRpZCI6IjkxMjIwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCIsIm5vbmNlIjoiMTIzNTIzIiwiYWlvIjoiRGYyVVZYTDFpeCFsTUNXTVNPSkJjRmF0emNHZnZGR2hqS3Y4cTVnMHg3MzJkUjVNQjVCaXN2R1FPN1lXQnlqZDhpUURMcSFlR2JJRGFreXA1bW5PcmNkcUhlWVNubHRlcFFtUnA2QUlaOGpZIn0.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw', 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:jwt-bearer', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-jwt-bearer', 'title' => 'Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'requestedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'subjectToken' => 'aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN', 'subjectTokenType' => 'urn:ietf:params:oauth:token-type:access_token', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhd3M6aWRlbnRpdHlfc3RvcmVfaWQiOiJkLTMzMzMzMzMzMzMiLCJzdWIiOiI3MzA0NDhmMi1lMGExLTcwYTctYzk1NC0wMDAwMDAwMDAwMDAiLCJhd3M6aW5zdGFuY2VfYWNjb3VudCI6IjExMTExMTExMTExMSIsInN0czppZGVudGl0eV9jb250ZXh0IjoiRVhBTVBMRUlERU5USVRZQ09OVEVYVCIsImlzcyI6Imh0dHBzOi8vaWRlbnRpdHljZW50ZXIuYW1hem9uYXdzLmNvbS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmlkZW50aXR5X3N0b3JlX2FybiI6ImFybjphd3M6aWRlbnRpdHlzdG9yZTo6MTExMTExMTExMTExOmlkZW50aXR5c3RvcmUvZC0zMzMzMzMzMzMzIiwiYXVkIjoiYXJuOmF3czpzc286OjEyMzQ1Njc4OTAxMjphcHBsaWNhdGlvbi9zc29pbnMtMTExMTExMTExMTExL2FwbC0yMjIyMjIyMjIyMjIiLCJhd3M6aW5zdGFuY2VfYXJuIjoiYXJuOmF3czpzc286OjppbnN0YW5jZS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmNyZWRlbnRpYWxfaWQiOiJfWlIyTjZhVkJqMjdGUEtheWpfcEtwVjc3QVBERl80MXB4ZXRfWWpJdUpONlVJR2RBdkpFWEFNUExFQ1JFRElEIiwiYXV0aF90aW1lIjoiMjAyMC0wMS0yMlQxMjo0NToyOVoiLCJleHAiOjE1Nzk3Mjk1MjksImlhdCI6MTU3OTcyNTkyOX0.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-token-exchange', 'title' => 'Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication', ], ], 'RegisterClient' => [ [ 'input' => [ 'clientName' => 'My IDE Plugin', 'clientType' => 'public', 'entitledApplicationArn' => 'arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111', 'grantTypes' => [ 'authorization_code', 'refresh_token', ], 'issuerUrl' => 'https://identitycenter.amazonaws.com/ssoins-1111111111111111', 'redirectUris' => [ '127.0.0.1:PORT/oauth/callback', ], 'scopes' => [ 'sso:account:access', 'codewhisperer:completions', ], ], 'output' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientIdIssuedAt' => 1579725929, 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'clientSecretExpiresAt' => 1587584729, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'register-client', 'title' => 'Call OAuth/OIDC /register-client endpoint', ], ], 'StartDeviceAuthorization' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'startUrl' => 'https://identitycenter.amazonaws.com/ssoins-111111111111', ], 'output' => [ 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'expiresIn' => 1579729529, 'interval' => 1, 'userCode' => 'makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', 'verificationUri' => 'https://directory-alias-example.awsapps.com/start/#/device', 'verificationUriComplete' => 'https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'start-device-authorization', 'title' => 'Call OAuth/OIDC /start-device-authorization endpoint', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json.php line 3
- Likely real
- Yes, 51% confidence
Generic Secret detected
return [ 'version' => '1.0', 'examples' => [ 'CreateToken' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'grantType' => 'urn:ietf:params:oauth:grant-type:device-code', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-device-code', 'title' => 'Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication', ], [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'codewhisperer:completions', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication', ], ], 'CreateTokenWithIAM' => [ [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'code' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE', 'grantType' => 'authorization_code', 'redirectUri' => 'https://mywebapp.example/redirect', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-auth-code', 'title' => 'Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication', ], [ 'input' => [ 'assertion' => 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw', 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:jwt-bearer', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-jwt-bearer', 'title' => 'Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'requestedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'subjectToken' => 'aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN', 'subjectTokenType' => 'urn:ietf:params:oauth:token-type:access_token', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-token-exchange', 'title' => 'Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication', ], ], 'RegisterClient' => [ [ 'input' => [ 'clientName' => 'My IDE Plugin', 'clientType' => 'public', 'entitledApplicationArn' => 'arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111', 'grantTypes' => [ 'authorization_code', 'refresh_token', ], 'issuerUrl' => 'https://identitycenter.amazonaws.com/ssoins-1111111111111111', 'redirectUris' => [ '127.0.0.1:PORT/oauth/callback', ], 'scopes' => [ 'sso:account:access', 'codewhisperer:completions', ], ], 'output' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientIdIssuedAt' => 1579725929, 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'clientSecretExpiresAt' => 1587584729, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'register-client', 'title' => 'Call OAuth/OIDC /register-client endpoint', ], ], 'StartDeviceAuthorization' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'startUrl' => 'https://identitycenter.amazonaws.com/ssoins-111111111111', ], 'output' => [ 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'expiresIn' => 1579729529, 'interval' => 1, 'userCode' => 'makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', 'verificationUri' => 'https://directory-alias-example.awsapps.com/start/#/device', 'verificationUriComplete' => 'https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'start-device-authorization', 'title' => 'Call OAuth/OIDC /start-device-authorization endpoint', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json.php line 3
- Likely real
- Yes, 51% confidence
Generic Secret detected
return [ 'version' => '1.0', 'examples' => [ 'CreateToken' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'grantType' => 'urn:ietf:params:oauth:grant-type:device-code', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-device-code', 'title' => 'Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication', ], [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'codewhisperer:completions', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication', ], ], 'CreateTokenWithIAM' => [ [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'code' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE', 'grantType' => 'authorization_code', 'redirectUri' => 'https://mywebapp.example/redirect', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-auth-code', 'title' => 'Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication', ], [ 'input' => [ 'assertion' => 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw', 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:jwt-bearer', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-jwt-bearer', 'title' => 'Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'requestedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'subjectToken' => 'aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN', 'subjectTokenType' => 'urn:ietf:params:oauth:token-type:access_token', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-token-exchange', 'title' => 'Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication', ], ], 'RegisterClient' => [ [ 'input' => [ 'clientName' => 'My IDE Plugin', 'clientType' => 'public', 'entitledApplicationArn' => 'arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111', 'grantTypes' => [ 'authorization_code', 'refresh_token', ], 'issuerUrl' => 'https://identitycenter.amazonaws.com/ssoins-1111111111111111', 'redirectUris' => [ '127.0.0.1:PORT/oauth/callback', ], 'scopes' => [ 'sso:account:access', 'codewhisperer:completions', ], ], 'output' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientIdIssuedAt' => 1579725929, 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'clientSecretExpiresAt' => 1587584729, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'register-client', 'title' => 'Call OAuth/OIDC /register-client endpoint', ], ], 'StartDeviceAuthorization' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'startUrl' => 'https://identitycenter.amazonaws.com/ssoins-111111111111', ], 'output' => [ 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'expiresIn' => 1579729529, 'interval' => 1, 'userCode' => 'makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', 'verificationUri' => 'https://directory-alias-example.awsapps.com/start/#/device', 'verificationUriComplete' => 'https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'start-device-authorization', 'title' => 'Call OAuth/OIDC /start-device-authorization endpoint', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json.php line 3
- Likely real
- Yes, 51% confidence
Generic Secret detected
return [ 'version' => '1.0', 'examples' => [ 'CreateToken' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'grantType' => 'urn:ietf:params:oauth:grant-type:device-code', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-device-code', 'title' => 'Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication', ], [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'codewhisperer:completions', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication', ], ], 'CreateTokenWithIAM' => [ [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'code' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE', 'grantType' => 'authorization_code', 'redirectUri' => 'https://mywebapp.example/redirect', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-auth-code', 'title' => 'Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication', ], [ 'input' => [ 'assertion' => 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw', 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:jwt-bearer', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhd3M6aWRlbnRpdHlfc3RvcmVfaWQiOiJkLTMzMzMzMzMzMzMiLCJzdWIiOiI3MzA0NDhmMi1lMGExLTcwYTctYzk1NC0wMDAwMDAwMDAwMDAiLCJhd3M6aW5zdGFuY2VfYWNjb3VudCI6IjExMTExMTExMTExMSIsInN0czppZGVudGl0eV9jb250ZXh0IjoiRVhBTVBMRUlERU5USVRZQ09OVEVYVCIsInN0czphdWRpdF9jb250ZXh0IjoiRVhBTVBMRUFVRElUQ09OVEVYVCIsImlzcyI6Imh0dHBzOi8vaWRlbnRpdHljZW50ZXIuYW1hem9uYXdzLmNvbS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmlkZW50aXR5X3N0b3JlX2FybiI6ImFybjphd3M6aWRlbnRpdHlzdG9yZTo6MTExMTExMTExMTExOmlkZW50aXR5c3RvcmUvZC0zMzMzMzMzMzMzIiwiYXVkIjoiYXJuOmF3czpzc286OjEyMzQ1Njc4OTAxMjphcHBsaWNhdGlvbi9zc29pbnMtMTExMTExMTExMTExL2FwbC0yMjIyMjIyMjIyMjIiLCJhd3M6aW5zdGFuY2VfYXJuIjoiYXJuOmF3czpzc286OjppbnN0YW5jZS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmNyZWRlbnRpYWxfaWQiOiJfWlIyTjZhVkJqMjdGUEtheWpfcEtwVjc3QVBERl80MXB4ZXRfWWpJdUpONlVJR2RBdkpFWEFNUExFQ1JFRElEIiwiYXV0aF90aW1lIjoiMjAyMC0wMS0yMlQxMjo0NToyOVoiLCJleHAiOjE1Nzk3Mjk1MjksImlhdCI6MTU3OTcyNTkyOX0.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-jwt-bearer', 'title' => 'Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'requestedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'subjectToken' => 'aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN', 'subjectTokenType' => 'urn:ietf:params:oauth:token-type:access_token', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-token-exchange', 'title' => 'Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication', ], ], 'RegisterClient' => [ [ 'input' => [ 'clientName' => 'My IDE Plugin', 'clientType' => 'public', 'entitledApplicationArn' => 'arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111', 'grantTypes' => [ 'authorization_code', 'refresh_token', ], 'issuerUrl' => 'https://identitycenter.amazonaws.com/ssoins-1111111111111111', 'redirectUris' => [ '127.0.0.1:PORT/oauth/callback', ], 'scopes' => [ 'sso:account:access', 'codewhisperer:completions', ], ], 'output' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientIdIssuedAt' => 1579725929, 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'clientSecretExpiresAt' => 1587584729, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'register-client', 'title' => 'Call OAuth/OIDC /register-client endpoint', ], ], 'StartDeviceAuthorization' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'startUrl' => 'https://identitycenter.amazonaws.com/ssoins-111111111111', ], 'output' => [ 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'expiresIn' => 1579729529, 'interval' => 1, 'userCode' => 'makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', 'verificationUri' => 'https://directory-alias-example.awsapps.com/start/#/device', 'verificationUriComplete' => 'https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'start-device-authorization', 'title' => 'Call OAuth/OIDC /start-device-authorization endpoint', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /compatibility-test.php line 166
- Likely real
- Yes, 50% confidence
The 'phpinfo' function may reveal sensitive information about your environment.
phpinfo(INFO_GENERAL); -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json line 126
- Likely real
- Uncertain, 50% confidence
JWT token detected
"idToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json.php line 3
- Likely real
- Uncertain, 50% confidence
JWT token detected
return [ 'version' => '1.0', 'examples' => [ 'CreateToken' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'grantType' => 'urn:ietf:params:oauth:grant-type:device-code', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-device-code', 'title' => 'Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication', ], [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'codewhisperer:completions', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication', ], ], 'CreateTokenWithIAM' => [ [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'code' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE', 'grantType' => 'authorization_code', 'redirectUri' => 'https://mywebapp.example/redirect', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-auth-code', 'title' => 'Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication', ], [ 'input' => [ 'assertion' => 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw', 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:jwt-bearer', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-jwt-bearer', 'title' => 'Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'requestedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'subjectToken' => 'aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN', 'subjectTokenType' => 'urn:ietf:params:oauth:token-type:access_token', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-token-exchange', 'title' => 'Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication', ], ], 'RegisterClient' => [ [ 'input' => [ 'clientName' => 'My IDE Plugin', 'clientType' => 'public', 'entitledApplicationArn' => 'arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111', 'grantTypes' => [ 'authorization_code', 'refresh_token', ], 'issuerUrl' => 'https://identitycenter.amazonaws.com/ssoins-1111111111111111', 'redirectUris' => [ '127.0.0.1:PORT/oauth/callback', ], 'scopes' => [ 'sso:account:access', 'codewhisperer:completions', ], ], 'output' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientIdIssuedAt' => 1579725929, 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'clientSecretExpiresAt' => 1587584729, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'register-client', 'title' => 'Call OAuth/OIDC /register-client endpoint', ], ], 'StartDeviceAuthorization' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'startUrl' => 'https://identitycenter.amazonaws.com/ssoins-111111111111', ], 'output' => [ 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'expiresIn' => 1579729529, 'interval' => 1, 'userCode' => 'makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', 'verificationUri' => 'https://directory-alias-example.awsapps.com/start/#/device', 'verificationUriComplete' => 'https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'start-device-authorization', 'title' => 'Call OAuth/OIDC /start-device-authorization endpoint', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json.php line 3
- Likely real
- Uncertain, 50% confidence
JWT token detected
return [ 'version' => '1.0', 'examples' => [ 'CreateToken' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'grantType' => 'urn:ietf:params:oauth:grant-type:device-code', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-device-code', 'title' => 'Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication', ], [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'codewhisperer:completions', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication', ], ], 'CreateTokenWithIAM' => [ [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'code' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE', 'grantType' => 'authorization_code', 'redirectUri' => 'https://mywebapp.example/redirect', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhd3M6aWRlbnRpdHlfc3RvcmVfaWQiOiJkLTMzMzMzMzMzMzMiLCJzdWIiOiI3MzA0NDhmMi1lMGExLTcwYTctYzk1NC0wMDAwMDAwMDAwMDAiLCJhd3M6aW5zdGFuY2VfYWNjb3VudCI6IjExMTExMTExMTExMSIsInN0czppZGVudGl0eV9jb250ZXh0IjoiRVhBTVBMRUlERU5USVRZQ09OVEVYVCIsInN0czphdWRpdF9jb250ZXh0IjoiRVhBTVBMRUFVRElUQ09OVEVYVCIsImlzcyI6Imh0dHBzOi8vaWRlbnRpdHljZW50ZXIuYW1hem9uYXdzLmNvbS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmlkZW50aXR5X3N0b3JlX2FybiI6ImFybjphd3M6aWRlbnRpdHlzdG9yZTo6MTExMTExMTExMTExOmlkZW50aXR5c3RvcmUvZC0zMzMzMzMzMzMzIiwiYXVkIjoiYXJuOmF3czpzc286OjEyMzQ1Njc4OTAxMjphcHBsaWNhdGlvbi9zc29pbnMtMTExMTExMTExMTExL2FwbC0yMjIyMjIyMjIyMjIiLCJhd3M6aW5zdGFuY2VfYXJuIjoiYXJuOmF3czpzc286OjppbnN0YW5jZS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmNyZWRlbnRpYWxfaWQiOiJfWlIyTjZhVkJqMjdGUEtheWpfcEtwVjc3QVBERl80MXB4ZXRfWWpJdUpONlVJR2RBdkpFWEFNUExFQ1JFRElEIiwiYXV0aF90aW1lIjoiMjAyMC0wMS0yMlQxMjo0NToyOVoiLCJleHAiOjE1Nzk3Mjk1MjksImlhdCI6MTU3OTcyNTkyOX0.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-auth-code', 'title' => 'Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication', ], [ 'input' => [ 'assertion' => 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.eyJ2ZXIiOiIyLjAiLCJpc3MiOiJodHRwczovL2xvZ2luLm1pY3Jvc29mdG9ubGluZS5jb20vOTEyMjA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkL3YyLjAiLCJzdWIiOiJBQUFBQUFBQUFBQUFBQUFBQUFBQUFJa3pxRlZyU2FTYUZIeTc4MmJidGFRIiwiYXVkIjoiNmNiMDQwMTgtYTNmNS00NmE3LWI5OTUtOTQwYzc4ZjVhZWYzIiwiZXhwIjoxNTM2MzYxNDExLCJpYXQiOjE1MzYyNzQ3MTEsIm5iZiI6MTUzNjI3NDcxMSwibmFtZSI6IkFiZSBMaW5jb2xuIiwicHJlZmVycmVkX3VzZXJuYW1lIjoiQWJlTGlAbWljcm9zb2Z0LmNvbSIsIm9pZCI6IjAwMDAwMDAwLTAwMDAtMDAwMC02NmYzLTMzMzJlY2E3ZWE4MSIsInRpZCI6IjkxMjIwNDBkLTZjNjctNGM1Yi1iMTEyLTM2YTMwNGI2NmRhZCIsIm5vbmNlIjoiMTIzNTIzIiwiYWlvIjoiRGYyVVZYTDFpeCFsTUNXTVNPSkJjRmF0emNHZnZGR2hqS3Y4cTVnMHg3MzJkUjVNQjVCaXN2R1FPN1lXQnlqZDhpUURMcSFlR2JJRGFreXA1bW5PcmNkcUhlWVNubHRlcFFtUnA2QUlaOGpZIn0.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw', 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:jwt-bearer', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-jwt-bearer', 'title' => 'Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'requestedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'subjectToken' => 'aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN', 'subjectTokenType' => 'urn:ietf:params:oauth:token-type:access_token', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-token-exchange', 'title' => 'Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication', ], ], 'RegisterClient' => [ [ 'input' => [ 'clientName' => 'My IDE Plugin', 'clientType' => 'public', 'entitledApplicationArn' => 'arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111', 'grantTypes' => [ 'authorization_code', 'refresh_token', ], 'issuerUrl' => 'https://identitycenter.amazonaws.com/ssoins-1111111111111111', 'redirectUris' => [ '127.0.0.1:PORT/oauth/callback', ], 'scopes' => [ 'sso:account:access', 'codewhisperer:completions', ], ], 'output' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientIdIssuedAt' => 1579725929, 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'clientSecretExpiresAt' => 1587584729, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'register-client', 'title' => 'Call OAuth/OIDC /register-client endpoint', ], ], 'StartDeviceAuthorization' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'startUrl' => 'https://identitycenter.amazonaws.com/ssoins-111111111111', ], 'output' => [ 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'expiresIn' => 1579729529, 'interval' => 1, 'userCode' => 'makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', 'verificationUri' => 'https://directory-alias-example.awsapps.com/start/#/device', 'verificationUriComplete' => 'https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'start-device-authorization', 'title' => 'Call OAuth/OIDC /start-device-authorization endpoint', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json.php line 3
- Likely real
- Uncertain, 50% confidence
JWT token detected
return [ 'version' => '1.0', 'examples' => [ 'CreateToken' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'grantType' => 'urn:ietf:params:oauth:grant-type:device-code', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-device-code', 'title' => 'Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication', ], [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'codewhisperer:completions', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication', ], ], 'CreateTokenWithIAM' => [ [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'code' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE', 'grantType' => 'authorization_code', 'redirectUri' => 'https://mywebapp.example/redirect', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-auth-code', 'title' => 'Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication', ], [ 'input' => [ 'assertion' => 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw', 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:jwt-bearer', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhd3M6aWRlbnRpdHlfc3RvcmVfaWQiOiJkLTMzMzMzMzMzMzMiLCJzdWIiOiI3MzA0NDhmMi1lMGExLTcwYTctYzk1NC0wMDAwMDAwMDAwMDAiLCJhd3M6aW5zdGFuY2VfYWNjb3VudCI6IjExMTExMTExMTExMSIsInN0czppZGVudGl0eV9jb250ZXh0IjoiRVhBTVBMRUlERU5USVRZQ09OVEVYVCIsInN0czphdWRpdF9jb250ZXh0IjoiRVhBTVBMRUFVRElUQ09OVEVYVCIsImlzcyI6Imh0dHBzOi8vaWRlbnRpdHljZW50ZXIuYW1hem9uYXdzLmNvbS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmlkZW50aXR5X3N0b3JlX2FybiI6ImFybjphd3M6aWRlbnRpdHlzdG9yZTo6MTExMTExMTExMTExOmlkZW50aXR5c3RvcmUvZC0zMzMzMzMzMzMzIiwiYXVkIjoiYXJuOmF3czpzc286OjEyMzQ1Njc4OTAxMjphcHBsaWNhdGlvbi9zc29pbnMtMTExMTExMTExMTExL2FwbC0yMjIyMjIyMjIyMjIiLCJhd3M6aW5zdGFuY2VfYXJuIjoiYXJuOmF3czpzc286OjppbnN0YW5jZS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmNyZWRlbnRpYWxfaWQiOiJfWlIyTjZhVkJqMjdGUEtheWpfcEtwVjc3QVBERl80MXB4ZXRfWWpJdUpONlVJR2RBdkpFWEFNUExFQ1JFRElEIiwiYXV0aF90aW1lIjoiMjAyMC0wMS0yMlQxMjo0NToyOVoiLCJleHAiOjE1Nzk3Mjk1MjksImlhdCI6MTU3OTcyNTkyOX0.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-jwt-bearer', 'title' => 'Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'requestedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'subjectToken' => 'aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN', 'subjectTokenType' => 'urn:ietf:params:oauth:token-type:access_token', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-token-exchange', 'title' => 'Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication', ], ], 'RegisterClient' => [ [ 'input' => [ 'clientName' => 'My IDE Plugin', 'clientType' => 'public', 'entitledApplicationArn' => 'arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111', 'grantTypes' => [ 'authorization_code', 'refresh_token', ], 'issuerUrl' => 'https://identitycenter.amazonaws.com/ssoins-1111111111111111', 'redirectUris' => [ '127.0.0.1:PORT/oauth/callback', ], 'scopes' => [ 'sso:account:access', 'codewhisperer:completions', ], ], 'output' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientIdIssuedAt' => 1579725929, 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'clientSecretExpiresAt' => 1587584729, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'register-client', 'title' => 'Call OAuth/OIDC /register-client endpoint', ], ], 'StartDeviceAuthorization' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'startUrl' => 'https://identitycenter.amazonaws.com/ssoins-111111111111', ], 'output' => [ 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'expiresIn' => 1579729529, 'interval' => 1, 'userCode' => 'makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', 'verificationUri' => 'https://directory-alias-example.awsapps.com/start/#/device', 'verificationUriComplete' => 'https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'start-device-authorization', 'title' => 'Call OAuth/OIDC /start-device-authorization endpoint', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json.php line 3
- Likely real
- Uncertain, 50% confidence
JWT token detected
return [ 'version' => '1.0', 'examples' => [ 'CreateToken' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'grantType' => 'urn:ietf:params:oauth:grant-type:device-code', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-device-code', 'title' => 'Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication', ], [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'codewhisperer:completions', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication', ], ], 'CreateTokenWithIAM' => [ [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'code' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE', 'grantType' => 'authorization_code', 'redirectUri' => 'https://mywebapp.example/redirect', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-auth-code', 'title' => 'Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'expiresIn' => 1579729529, 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-refresh-token', 'title' => 'Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication', ], [ 'input' => [ 'assertion' => 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw', 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:jwt-bearer', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:refresh_token', 'refreshToken' => 'aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-jwt-bearer', 'title' => 'Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication', ], [ 'input' => [ 'clientId' => 'arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222', 'grantType' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'requestedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'subjectToken' => 'aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN', 'subjectTokenType' => 'urn:ietf:params:oauth:token-type:access_token', ], 'output' => [ 'accessToken' => 'aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN', 'awsAdditionalDetails' => [ 'identityContext' => 'EXAMPLEIDENTITYCONTEXT', ], 'expiresIn' => 1579729529, 'idToken' => 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM', 'issuedTokenType' => 'urn:ietf:params:oauth:token-type:access_token', 'scope' => [ 'openid', 'aws', 'sts:identity_context', ], 'tokenType' => 'Bearer', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'create-token-with-iam-for-token-exchange', 'title' => 'Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication', ], ], 'RegisterClient' => [ [ 'input' => [ 'clientName' => 'My IDE Plugin', 'clientType' => 'public', 'entitledApplicationArn' => 'arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111', 'grantTypes' => [ 'authorization_code', 'refresh_token', ], 'issuerUrl' => 'https://identitycenter.amazonaws.com/ssoins-1111111111111111', 'redirectUris' => [ '127.0.0.1:PORT/oauth/callback', ], 'scopes' => [ 'sso:account:access', 'codewhisperer:completions', ], ], 'output' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientIdIssuedAt' => 1579725929, 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'clientSecretExpiresAt' => 1587584729, ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'register-client', 'title' => 'Call OAuth/OIDC /register-client endpoint', ], ], 'StartDeviceAuthorization' => [ [ 'input' => [ 'clientId' => '_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID', 'clientSecret' => 'VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0', 'startUrl' => 'https://identitycenter.amazonaws.com/ssoins-111111111111', ], 'output' => [ 'deviceCode' => 'yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE', 'expiresIn' => 1579729529, 'interval' => 1, 'userCode' => 'makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', 'verificationUri' => 'https://directory-alias-example.awsapps.com/start/#/device', 'verificationUriComplete' => 'https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE', ], 'comments' => [ 'input' => [], 'output' => [], ], 'description' => '', 'id' => 'start-device-authorization', 'title' => 'Call OAuth/OIDC /start-device-authorization endpoint', ], ], ],]; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json line 158
- Likely real
- Uncertain, 50% confidence
JWT token detected
"idToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhd3M6aWRlbnRpdHlfc3RvcmVfaWQiOiJkLTMzMzMzMzMzMzMiLCJzdWIiOiI3MzA0NDhmMi1lMGExLTcwYTctYzk1NC0wMDAwMDAwMDAwMDAiLCJhd3M6aW5zdGFuY2VfYWNjb3VudCI6IjExMTExMTExMTExMSIsInN0czppZGVudGl0eV9jb250ZXh0IjoiRVhBTVBMRUlERU5USVRZQ09OVEVYVCIsImlzcyI6Imh0dHBzOi8vaWRlbnRpdHljZW50ZXIuYW1hem9uYXdzLmNvbS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmlkZW50aXR5X3N0b3JlX2FybiI6ImFybjphd3M6aWRlbnRpdHlzdG9yZTo6MTExMTExMTExMTExOmlkZW50aXR5c3RvcmUvZC0zMzMzMzMzMzMzIiwiYXVkIjoiYXJuOmF3czpzc286OjEyMzQ1Njc4OTAxMjphcHBsaWNhdGlvbi9zc29pbnMtMTExMTExMTExMTExL2FwbC0yMjIyMjIyMjIyMjIiLCJhd3M6aW5zdGFuY2VfYXJuIjoiYXJuOmF3czpzc286OjppbnN0YW5jZS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmNyZWRlbnRpYWxfaWQiOiJfWlIyTjZhVkJqMjdGUEtheWpfcEtwVjc3QVBERl80MXB4ZXRfWWpJdUpONlVJR2RBdkpFWEFNUExFQ1JFRElEIiwiYXV0aF90aW1lIjoiMjAyMC0wMS0yMlQxMjo0NToyOVoiLCJleHAiOjE1Nzk3Mjk1MjksImlhdCI6MTU3OTcyNTkyOX0.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json line 116
- Likely real
- Uncertain, 50% confidence
JWT token detected
"assertion": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/data/sso-oidc/2019-06-10/examples-1.json line 70
- Likely real
- Uncertain, 50% confidence
JWT token detected
"idToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0", -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/Credentials/CredentialProvider.php line 605
- Likely real
- Uncertain, 43% confidence
Executing non-constant commands. This can lead to command injection.
$json = shell_exec($credentialProcess); -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/Crypto/AesDecryptingStream.php line 134
- Likely real
- Yes, 52% confidence
The function `openssl_decrypt` returns either a string of the decrypted data on success or `false` on failure. If the failure case is not handled, this could lead to undefined behavior in your application. Please handle the case where `openssl_decrypt` returns `false`.
$plaintext = openssl_decrypt( $cipherText, $this->cipherMethod->getOpenSslName(), $this->key, $options, $this->cipherMethod->getCurrentIv() ); -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /.github/workflows/pull-request-build.yml line 27
- Likely real
- Yes, 52% confidence
GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. `uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608`.
uses: aws-actions/configure-aws-credentials@main -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/S3/S3Transfer/Utils/FileDownloadHandler.php line 386
- Likely real
- Probably noise, 21% confidence
Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to.
if (!unlink($this->destination)) { -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/S3/S3Transfer/Utils/FileDownloadHandler.php line 408
- Likely real
- Probably noise, 21% confidence
Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to.
unlink($this->temporaryFilePath); -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/S3/S3Transfer/Models/AbstractResumableTransfer.php line 116
- Likely real
- Probably noise, 20% confidence
Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to.
unlink($resumeFilePath); -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /src/S3/S3Transfer/Utils/FileDownloadHandler.php line 419
- Likely real
- Probably noise, 20% confidence
Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to.
unlink($this->destination); -
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /Makefile
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /.github/workflows/docs-build.yml
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version
No findings match these filters.