id: okta-api

info:
  name: Okta API Token
  author: DhiyaneshDK
  severity: info
  reference:
    - https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/builtin/rules/okta.yml
    - https://devforum.okta.com/t/api-token-length/5519
    - https://developer.okta.com/docs/guides/create-an-api-token/main/
  metadata:
    verified: true
  tags: okta,keys,file

file:
  - extensions:
      - all

    extractors:
      - type: regex
        part: body
        regex:
          - (?i)(?s)(?:okta|ssws).{0,40}\b(00[a-z0-9_-]{39}[a-z0-9_])\b
# digest: 4a0a00473045022100ea13cbbd3dda8c1539499950aea3c71d677ca34b07391217a2bfee904f8d2b1402200aaa5561a642309e1f91348c1a6221ff1dd7872f59dfef094f7562d34a7c96b8:922c64590222798bb761d5b6d8e72950