fix(algolia): 403 is invalid (#3653)

trufflesecurity · Nov 21, 2024 · ab36b37 · ab36b37
1 parent 098072b
commit ab36b37
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/pkg/detectors/algoliaadminkey/algoliaadminkey.go b/pkg/detectors/algoliaadminkey/algoliaadminkey.go
@@ -138,8 +138,9 @@ func verifyMatch(ctx context.Context, appId, apiKey string) (bool, map[string]st
 	case http.StatusUnauthorized:
 		return false, nil, nil
 	case http.StatusForbidden:
-		// Key is valid but lacks permissions.
-		return true, nil, nil
+		// Invalidated key.
+		// {"message":"Invalid Application-ID or API key","status":403}
+		return false, nil, nil
 	default:
 		return false, nil, fmt.Errorf("unexpected HTTP response status %d", res.StatusCode)
 	}