WePay token

Description

General

• Documentation: https://developer.wepay.com/api/
• Summary: WePay is an online payment service provider that offers payment solutions through its API for platform businesses. As an API providing financial related information, the corresponding API key is highly sensitive.
• IPs allowlist: This feature is enabled. See this documentation for more details.
• Scopes: All access tokens have the same access to the API.

Revoke the secret

Access tokens can be revoked two ways: a user goes to their user settings on WePay and manually revokes the token, a call to the /oauth2/token route is made and thus revokes all access tokens previously issued for the concerned app or user. See the documentation for more details.

Check for suspicious activity

Notifications can be set to monitor suspicious account activities, these are called Instant Payment Notifications. Although it does not list all API calls made with a token it can help to detect fraudulent use of an account.

Details for Wepay token

• Family: Api

• Category: Payment system

• Company: WePay

• High recall: True

• Validity check available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.05

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - production_
    - stage_

Examples

- text: Bearer STAGE_8a19aff55b85a436dad5cd1386db1999437facb5914b494f4da5f206a56a1234
  token: STAGE_8a19aff55b85a436dad5cd1386db1999437facb5914b494f4da5f206a56a1234

- text: BEARER PRODUCTION_94401e6218952c37d99d485e0762d394f506cc16c62ccb66b60527f3784c1234
  token: PRODUCTION_94401e6218952c37d99d485e0762d394f506cc16c62ccb66b60527f3784c1234

- text: 'WEPAY_SANDBOX_ACCESS_TOKEN: STAGE_ebbed7ef921e811c1080572c0c75777f2d3d9a8f32b025656a249671ab7a1234'
  token: STAGE_ebbed7ef921e811c1080572c0c75777f2d3d9a8f32b025656a249671ab7a1234

- text: 'WEPAY_ACCESS_TOKEN: PRODUCTION_47fa4bf7178a21e29264f47b600264f511d76e53f04ea67585493c2b24591234'
  token: PRODUCTION_47fa4bf7178a21e29264f47b600264f511d76e53f04ea67585493c2b24591234

- text: 'WEPAY_SANDBOX_ACCESS_TOKEN: STAGE_6d10355075f1e7ef6e0f3f44688cca958178c6408b3ee99054f667dcd9fd1234'
  token: STAGE_6d10355075f1e7ef6e0f3f44688cca958178c6408b3ee99054f667dcd9fd1234

- text: 'WEPAY_SANDBOX_ACCESS_TOKEN: STAGE_3474e1996d70010126eafdecccb959b3df0037e0e211367930ded76d02511234'
  token: STAGE_3474e1996d70010126eafdecccb959b3df0037e0e211367930ded76d02511234

- text: "      'access_token':   'PRODUCTION_ed41e33671a46b6a3a93e6c6c6d45265fcb62a8f04998d232391bcd3e3971234',"
  token: PRODUCTION_ed41e33671a46b6a3a93e6c6c6d45265fcb62a8f04998d232391bcd3e3971234

- text: "      'access_token':   'STAGE_3c234c249310a336d4999b8604b73a27ac5ec6e7255ac9a7ef3d0b6c26291234',"
  token: STAGE_3c234c249310a336d4999b8604b73a27ac5ec6e7255ac9a7ef3d0b6c26291234

# Fat-fingered secrets
- text: XPRODUCTION_ed41e33671a46b6a3a93e6c6c6d45265fcb62a8f04998d232391bcd3e3971234
  token: PRODUCTION_ed41e33671a46b6a3a93e6c6c6d45265fcb62a8f04998d232391bcd3e3971234

- text: XSTAGE_3c234c249310a336d4999b8604b73a27ac5ec6e7255ac9a7ef3d0b6c26291234
  token: STAGE_3c234c249310a336d4999b8604b73a27ac5ec6e7255ac9a7ef3d0b6c26291234