Heroku API OAuth access token
ID heroku_oauth_token
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
OAuth access token of the Heroku Platform API, which the Heroku CLI also uses. Tokens granted from April 2024 start with HRKU-: until April 2025 the prefix was followed by a UUID (41 characters in all), and newer tokens have 65 characters. Older tokens are a bare UUID and cannot be told from other UUIDs, so the regexp covers only the prefixed forms.
- Parent datatype
- Access token
access_token - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 78/100 · missing: second example, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Gitleaks, Semgrep, TruffleHog
Regular expression
^HRKU-(?:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|AA[0-9A-Za-z_-]{58})$Python re syntax.
Examples
| Value | Description |
|---|---|
| HRKU-AAExampleTokenExampleTokenExampleTokenExampleTokenExampleTok | Constructed, non-functional value in the 65-character form |
| 57dce771-afad-4c41-a8a5-d10b7fbc743c invalid | Token in the old format without the prefix |
Sources
- doc: https://devcenter.heroku.com/changelog-items/2842
- doc: https://devcenter.heroku.com/changelog-items/3176
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/heroku_oauth_token - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/heroku_oauth_token.yamlon GitHub