id: api-flickr

info:
  name: Flickr API Test
  author: geeknik
  severity: info
  reference:
    - https://www.flickr.com/services/developer/api/
  tags: token-spray,flickr

self-contained: true
requests:
  - method: GET
    path:
      - "https://www.flickr.com/services/rest/?method=flickr.tags.getHotList&api_key={{token}}"

    matchers:
      - type: word
        part: body
        words:
          - 'secret'
          - 'owner'
          - 'username'
        condition: and