{
  "id": "heroku_oauth_token",
  "name": "Heroku API OAuth access token",
  "status": "draft",
  "doc": "OAuth access token of the Heroku Platform API, which the Heroku CLI also uses. Tokens granted from April 2024 start with HRKU-: until April 2025 the prefix was followed by a UUID (41 characters in all), and newer tokens have 65 characters. Older tokens are a bare UUID and cannot be told from other UUIDs, so the regexp covers only the prefixed forms.",
  "parent": {
    "type": "access_token"
  },
  "categories": [
    {
      "id": "secrets",
      "name": "Secrets and credentials (passwords, keys, tokens)"
    }
  ],
  "langs": [
    {
      "id": "common",
      "name": "Common to most languages"
    }
  ],
  "is_pii": false,
  "classification": "identifier",
  "regexp": "^HRKU-(?:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|AA[0-9A-Za-z_-]{58})$",
  "examples": [
    {
      "value": "HRKU-AAExampleTokenExampleTokenExampleTokenExampleTokenExampleTok",
      "description": "Constructed, non-functional value in the 65-character form"
    },
    {
      "value": "57dce771-afad-4c41-a8a5-d10b7fbc743c",
      "valid": false,
      "description": "Token in the old format without the prefix"
    }
  ],
  "links": [
    {
      "type": "doc",
      "url": "https://devcenter.heroku.com/changelog-items/2842"
    },
    {
      "type": "doc",
      "url": "https://devcenter.heroku.com/changelog-items/3176"
    },
    {
      "type": "other",
      "url": "https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml"
    }
  ],
  "type": "datatype",
  "translations": {}
}