Skip to main content

Adobe API Keys

Description#

General#

  • Documentation: https://www.adobe.io/apis/experienceplatform/console/docs.html
  • Summary: Adobe is a company specialized in creative softwares as well as marketing management softwares. They offer APIs to access their products programmatically. This detector aims at catching client_id/client_secret couples used by most of Adobe's APIs for authentication.
  • IPs allowlist: To the best of our knowledge this feature is currently not available.
  • Scopes: Credentials are linked to a specific API.

Revoke the secret#

Credentials can be revoked via Adobe developer console, on the project's dashboard, by selecting the credentials and clicking on "Delete credential".

Check for suspicious activity#

Insights are available on the project's dashboard, they only give access to the number of API calls over time.

Details for Adobe api keys#

  • Category: Other

  • Company: Adobe

  • High recall: False

  • Validity check available: False

  • Minimum number of matches: 2

  • Occurrences found for one million commits: very rare

  • Prefixed: False

  • PreValidators:

- type: FilenameBanlistPreValidator  banlist_extensions:  - ^(cs|x|p|s|r)?html5?~?$  - ^[aps]?cssc?~?$  - ^lock$  - ^mdx?~?$  - ^storyboard(c|er)?~?$  - ^xib$  banlist_filenames: []  check_binaries: false- type: ContentWhitelistPreValidator  patterns:  - adobelogin  - adobe\.io- type: ContentWhitelistPreValidator  patterns:  - (id|key)- type: ContentWhitelistPreValidator  patterns:  - secret

Examples#

- text: >    POST https://ims-na1.adobelogin.com/ims/exchange/jwt    api_key: "a4123cbde48947d4a06192428326d847",    client_secret: "ef123aec-8268-40ce-8c83-ab69f9564546",  client_id: a4123cbde48947d4a06192428326d847  client_secret: ef123aec-8268-40ce-8c83-ab69f9564546  # Pattern observed in historical data
- text: >    adobe.io    body: client_id=3681437dddf44013b893300cc34ecf12&client_secret=4FS-bbbEnJaXB4Cg6eaHzUBWebZUxBciaZ_O  client_id: 3681437dddf44013b893300cc34ecf12  client_secret: 4FS-bbbEnJaXB4Cg6eaHzUBWebZUxBciaZ_O  # Pattern observed when creating new credentials