@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
@prefix foaf: <http://xmlns.com/foaf/0.1/> .
@prefix mcr: <https://registry.apicrafter.io/vocab#> .
@prefix dt: <https://registry.apicrafter.io/datatype/> .
@prefix cat: <https://registry.apicrafter.io/category/> .
@prefix country: <https://registry.apicrafter.io/country/> .
@prefix tool: <https://registry.apicrafter.io/tool/> .

dt:azure_entra_client_secret a skos:Concept ;
    skos:inScheme <https://registry.apicrafter.io/> ;
    skos:notation "azure_entra_client_secret" ;
    skos:prefLabel "Microsoft Entra ID client secret"@en ;
    skos:definition "Client secret of a Microsoft Entra ID (Azure AD) application registration, used by a service principal to obtain tokens. Microsoft Purview describes the secret as up to 40 letters, digits and the characters - _ . ~. Secrets generated in the current format carry the marker Q~ after four characters; the regexp follows the gitleaks rule for this format and does not match older secrets."@en ;
    skos:broader dt:api_key ;
    mcr:status "draft" ;
    mcr:isPII false ;
    mcr:classification "identifier" ;
    mcr:regexp "^[A-Za-z0-9_~.]{3}[0-9]Q~[A-Za-z0-9_~.-]{31,34}$" ;
    rdfs:seeAlso <https://learn.microsoft.com/en-us/purview/sit-defn-azure-ad-client-secret> ;
    rdfs:seeAlso <https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml> .