Atlassian Oauth2 Keys

Description

General

• Documentation: https://developer.atlassian.com/cloud/jira/platform/oauth-2-authorization-code-grants-3lo-for-apps/
• Summary: This detector aims to catch Oauth2 keys for Atlassian software such as Jira, Bitbucket or Confluence. These keys allow apps to connect to those software.

Revoke the secret

This can be done from the apps dashboard: The app's secret can be regenerated.

Details for Atlassian Oauth2 Keys

• Family: credentials

• Category: collaboration_tool

• Company: Atlassian

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: True

• Only valid secrets raise an alert: True

• Minimum number of matches: 2

• Occurrences found for one million commits: 0.2

• Prefixed: False