Square OAuth application secret

ID square_oauth_secret

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Application secret of a Square developer application, which the application uses to exchange OAuth authorization codes for access tokens. It starts with sq0csp- followed by 43 characters. It is a different credential from a Square access token. Examples are left out because GitHub push protection rejects token-shaped values, even constructed ones.

Parent datatype: API key or client secret api_key
Categories: Secrets and credentials (passwords, keys, tokens)
Countries: Global (not tied to a country)
Languages: Common to most languages
Quality: 63/100 · missing: examples, authoritative source link, mapping (Wikidata, Schema.org, ...), translation
Metacrafter rules: no detection rule yet
Supported by tools: detect-secrets, Semgrep, TruffleHog

Regular expression

^sq0csp-[A-Za-z0-9_-]{43}$

Python re syntax.

Examples

Value	Description
sq0csp-ExampleSecretTooShort invalid	Too short

Sources

other: https://github.com/Yelp/detect-secrets/blob/master/detect_secrets/plugins/square_oauth.py

Use this record

Page URL: http://registry.apicrafter.io/datatype/square_oauth_secret
JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
Improve it: edit data/datatypes/any/secrets/square_oauth_secret.yaml on GitHub