Line Notify Token

Description

General

• Documentation: https://notify-bot.line.me/doc/en/

• Summary: Line Notify is a service provided by Line that allows users to send notifications to Line chats or groups. Line Notify Tokens are used to authenticate API requests to the Line Notify service, enabling programmatic sending of messages or alerts. These tokens are tied to specific Line accounts or groups and are highly sensitive as they grant access to send notifications.

• IPs allowlist: As of the time of writing this documentation, IP allowlisting is not supported for Line Notify Tokens.

• Scopes: Line Notify Tokens are associated with a specific Line account or group and can only send notifications to the associated chat or group. The tokens do not have granular permissions but are limited to sending messages via the Line Notify service. For more details, refer to the Line Notify documentation.

Revoke the secret

Line Notify Tokens can be revoked from the Line Notify dashboard. Navigate to the Manage Tokens page, locate the token, and revoke it to invalidate access. Alternatively, tokens can be revoked programmatically using the Line Notify API.

Check for suspicious activity

As of the time of writing this documentation, Line Notify does not provide a dedicated feature for monitoring suspicious activity specifically for tokens. However, notification history can be reviewed in the Line Notify dashboard.

Details for Line notify token

• Family: token

• Category: messaging_system

• Company: Line

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Minimum number of matches: 1

• Occurrences found for one million commits: 1.0

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions:
    - ^lock$
    - ^storyboard(c|er)?~?$
    - ^xib$
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: false
  ban_markup: false
- type: ContentWhitelistPreValidator
  patterns:
    - line
- type: ContentWhitelistPreValidator
  patterns:
    - secret
    - token
- type: ContentWhitelistPreValidator
  patterns:
    - '[a-z0-9]{43}'

Examples

- text: |
    line.bot:
    -  channel-token: 'X19NG51BI5J6ANMAZgjg2hfwWf4kL6PqPweTgG3EVkw'
  apikey: X19NG51BI5J6ANMAZgjg2hfwWf4kL6PqPweTgG3EVkw