Documentation
¶
Overview ¶
Package coinbase provides a verifier for legacy Coinbase API keys.
A legacy Coinbase API key is one half of a key/secret pair, and Coinbase's v2 API authenticates it with timestamp-based HMAC-SHA256 request signing (CB-ACCESS-KEY / CB-ACCESS-SIGN / CB-ACCESS-TIMESTAMP headers), NOT a bearer token. Correct live verification would require BOTH the key and its paired secret to compute the signature, but the detector captures the key and the secret as independent findings with no pairing, so the signing inputs are not reliably available here. Rather than send an unauthenticated call that cannot succeed (and would misreport every real key as invalid), this verifier is a format-only (Tier 3) check: it validates the key shape and always returns StatusUnverified, never claiming a live active/inactive result. It NEVER logs or persists raw key values.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Verifier ¶
type Verifier struct{}
Verifier performs a format-only check on a legacy Coinbase API key. It never makes a network call and never logs or persists raw key values.
func (*Verifier) Verify ¶
func (v *Verifier) Verify(ctx context.Context, raw detector.RawFinding) finding.VerificationResult
Verify performs a format-only validation of the detected Coinbase API key. Live verification is intentionally not attempted (see the package doc): the legacy API requires HMAC-SHA256 signing with the paired secret, which is not reliably available. The result is therefore always StatusUnverified.
Source Files