Function validate_github_token_enhanced

src/secrets_scanner.rs:330–363

Enhanced GitHub token validator with scope detection

(token: &str, client: &Client)

/// Enhanced GitHub token validator with scope detection
pub async fn validate_github_token_enhanced(token: &str, client: &Client) -> (bool, String, Vec<String>) {
    let url = "https://api.github.com/user";

    match client
        .get(url)
        .bearer_auth(token)
        .header("User-Agent", "EnumRust-Security-Scanner")
        .timeout(Duration::from_secs(10))
        .send()
        .await
    {
        Ok(response) => {
            let status = response.status();
            let scopes = response
                .headers()
                .get("x-oauth-scopes")
                .and_then(|v| v.to_str().ok())
                .unwrap_or("")
                .split(',')
                .map(|s| s.trim().to_string())
                .filter(|s| !s.is_empty())
                .collect();

            if status.is_success() {
                (true, "VALID_ACTIVE".to_string(), scopes)
            } else if status.as_u16() == 401 {
                (false, "INVALID_EXPIRED".to_string(), vec![])
            } else {
                (false, "ERROR_TESTING".to_string(), vec![])
            }
        }
        Err(_) => (false, "ERROR_TESTING".to_string(), vec![]),
    }
}

/// Enhanced Vercel token validator
pub async fn validate_vercel_token_enhanced(token: &str, client: &Client) -> (bool, String, Vec<String>) {