Securityflags: g

Generic API Key

Match generic long alphanumeric tokens (32+ chars) typical of API keys and access tokens.

Available in

JavaScript / ECMAScript code

jsJavaScript

const re = new RegExp("\\b[A-Za-z0-9_\\-]{32,}\\b", "g");
const input = "sk_test_abcdef0123456789abcdef0123456789abcd";
const matches = [...input.matchAll(re)];
console.log(matches.map(m => m[0]));

Uses `String.prototype.matchAll` for global iteration (Node 12+ / all modern browsers).

Python (re) code

pyPython

import re

pattern = re.compile(r"\b[A-Za-z0-9_\-]{32,}\b")
input_text = "sk_test_abcdef0123456789abcdef0123456789abcd"
for m in pattern.finditer(input_text):
    print(m.group(0))

Stdlib `re` module — no third-party dependency. Works on Python 3.6+.

Go (RE2) code

goGo

package main

import (
	"fmt"
	"regexp"
)

func main() {
	re := regexp.MustCompile(`\b[A-Za-z0-9_\-]{32,}\b`)
	input := `sk_test_abcdef0123456789abcdef0123456789abcd`
	for _, match := range re.FindAllString(input, -1) {
		fmt.Println(match)
	}
}

Uses `regexp.MustCompile` (panics on bad patterns at startup) and `FindAllString` for all matches.

Pattern

regexengine-agnostic

\b[A-Za-z0-9_\-]{32,}\b   (flags: g)

Raw source: \b[A-Za-z0-9_\-]{32,}\b

How it works

Word-bounded sequence of 32 or more letters, digits, underscores, or hyphens. Broad by design — pair with context (e.g. api_key=) to reduce false positives.