Documentation
¶
Overview ¶
Package twilio provides conservative verification for paired Twilio API Key credentials. Production makes no request until a trusted regional API origin is supplied by operator-controlled configuration.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Verifier ¶
type Verifier struct {
// contains filtered or unexported fields
}
Verifier checks a Twilio API Key Secret with its paired API Key SID. apiURL is an unexported trusted-origin seam; the production registration leaves it empty because Twilio credentials are region-specific.
func NewForTrustedInstance ¶ added in v1.8.0
NewForTrustedInstance accepts an operator-selected official Twilio regional API origin. Region selection is never inferred from scanned content.
func (*Verifier) Verify ¶
func (v *Verifier) Verify(ctx context.Context, raw detector.RawFinding) finding.VerificationResult
Verify authenticates with API Key SID as the Basic username and API Key Secret as the password. Main, Standard, and Restricted keys have different permissions: only 401 proves inactive; a permission-denied 403 is deliberately a verify_error.