Plivo Auth Tokens

Description

General

• Documentation: https://www.plivo.com/docs/
• Summary: Plivo is a voice and messaging platform that enables businesses to connect with their customers. It exposes both a messaging API and a voice API. All requests to Plivo API are authenticated with BasicAuth using an auth_id and auth_token.
• IPs allowlist: This feature is not mentioned in the documentation.
• Scopes: Auth_id and Auth_token are granted full access to the API.

Revoke the secret

The procedure to revoke or rotate auth_token can be found here.

Check for suspicious activity

This feature is not mentioned in the documentation.

Details for Plivo server tokens

• Family: Api

• Category: Messaging system

• Company: Plivo

• High recall: False

• Validity check available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Minimum number of matches: 2

• Occurrences found for one million commits: 0.03

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - plivo
- type: ContentWhitelistPreValidator
  patterns:
    - ma[0-9a-z]{18}

Examples

- text: |
    $config['PLIVO_AUTH_ID'] = 'MAZDY4DMVMZESYNGY0NV';
    $config['PLIVO_AUTH_TOKEN'] = 'PBNiY2U3YzliY2E2OGNhZDNjYjRkMGI5NDQ1MWHK';
  client_id: MAZDY4DMVMZESYNGY0NV
  client_secret: PBNiY2U3YzliY2E2OGNhZDNjYjRkMGI5NDQ1MWHK